Capabilities

Snap

Snap package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + EvidencePackage URL TypeLicenseDependenciesPackage Manager Claims
DepthEdgesKindsFilesDigestsIntegrity Hash
snap-cataloger
snap/snapcraft.yaml
pkg:deb
snap-cataloger
snap/manifest.yaml
pkg:deb
snap-cataloger
doc/linux-modules-*/changelog.Debian.gz
pkg:deb
snap-cataloger
usr/share/snappy/dpkg.yaml
pkg:deb

Vulnerability scanning

Data SourceDisclosuresFixesTrack by
Source
Package
AffectedDateVersionsDate
National Vulnerability Database (NVD)

Grype Configuration
Configuration KeyDescription
match.stock.using-cpesUse CPE package identifiers to find vulnerabilities

Next steps