{"id":13533285,"url":"https://github.com/snyk-labs/helm-snyk","last_synced_at":"2026-02-26T11:15:18.836Z","repository":{"id":35446990,"uuid":"214002996","full_name":"snyk-labs/helm-snyk","owner":"snyk-labs","description":"Check images in your charts for vulnerabilities","archived":false,"fork":false,"pushed_at":"2023-07-08T13:46:24.000Z","size":1037,"stargazers_count":41,"open_issues_count":28,"forks_count":28,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-06-10T11:12:54.200Z","etag":null,"topics":["helm-plugin","snyk"],"latest_commit_sha":null,"homepage":"https://snyk.io","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/snyk-labs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-10-09T19:12:48.000Z","updated_at":"2025-02-25T16:27:10.000Z","dependencies_parsed_at":"2024-01-13T12:52:48.568Z","dependency_job_id":"c9fcd6a7-25e2-4f11-90b0-4af67c972cb1","html_url":"https://github.com/snyk-labs/helm-snyk","commit_stats":null,"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/snyk-labs/helm-snyk","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snyk-labs%2Fhelm-snyk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snyk-labs%2Fhelm-snyk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snyk-labs%2Fhelm-snyk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snyk-labs%2Fhelm-snyk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/snyk-labs","download_url":"https://codeload.github.com/snyk-labs/helm-snyk/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snyk-labs%2Fhelm-snyk/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29856987,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-26T08:51:08.701Z","status":"ssl_error","status_checked_at":"2026-02-26T08:50:19.607Z","response_time":89,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["helm-plugin","snyk"],"created_at":"2024-08-01T07:01:18.351Z","updated_at":"2026-02-26T11:15:18.809Z","avatar_url":"https://github.com/snyk-labs.png","language":"TypeScript","funding_links":[],"categories":["Kubernetes","Repositories / Tools","Snyk CLI, Plugins, Extensions, Filters"],"sub_categories":["Defending"],"readme":"# Check your Helm chart for vulnerabilities\n\n[![CircleCI](https://circleci.com/gh/snyk-labs/helm-snyk/tree/master.svg?style=svg)](https://circleci.com/gh/snyk-labs/helm-snyk/tree/master)\n\nThe Helm plugin for [Snyk](https://snyk.io/) provides a subcommand for testing the images in a given Helm chart for known vulnerabilities.\n\n## Installation\n\nInstall the plugin using the built-in `helm plugin` command:\n\n```\nhelm plugin install https://github.com/snyk-labs/helm-snyk\n```\n\nThe plugin connects to the Snyk service to lookup vulnerability information. If you don't have a Snyk account, go to [snyk.io/login](https://snyk.io/login) to sign up for free. You can then obtain an access token from [app.snyk.io/account](https://app.snyk.io/account) or for information on using service accounts, see [snyk.io/docs/service-accounts/](https://snyk.io/docs/service-accounts/).\n\nOnce you have an account, you should set the `SNYK_TOKEN` environment variable:\n\n```\nexport SNYK_TOKEN=\u003cyour-snyk-token\u003e\n```\n\nThe plugin also requires a local Docker installation and uses this to download and test each of the images discovered in the chart.\n\n\n## Usage\n\nWith the plugin installed, simply run the new `helm snyk test` command and point it to the directory of the chart. For instance:\n\n```console\n$ helm snyk test stable/redis\nImage: docker.io/bitnami/redis:5.0.5-debian-9-r181\nTesting docker.io/bitnami/redis:5.0.5-debian-9-r181...\n✗ Low severity vulnerability found in tar\n  Description: CVE-2005-2541\n  Info: https://snyk.io/vuln/SNYK-LINUX-TAR-105079\n  Introduced through: meta-common-packages@meta\n  From: meta-common-packages@meta \u003e tar@1.29b-1.1\n✗ Low severity vulnerability found in systemd/libsystemd0\n  Description: CVE-2019-9619\n  Info: https://snyk.io/vuln/SNYK-LINUX-SYSTEMD-442642\n  Introduced through: systemd/libsystemd0@232-25+deb9u12, util-linux/bsdutils@1:2.29.2-1+deb9u1, procps@2:3.3.12-3+deb9u1, sysvinit/sysvinit-utils@2.88dsf-59.9, systemd/libudev1@232-25+deb9u12, util-linux/mount@2.29.2-1+deb9u1\n  From: systemd/libsystemd0@232-25+deb9u12\n  From: util-linux/bsdutils@1:2.29.2-1+deb9u1 \u003e systemd/libsystemd0@232-25+deb9u12\n  From: procps@2:3.3.12-3+deb9u1 \u003e procps/libprocps6@2:3.3.12-3+deb9u1 \u003e systemd/libsystemd0@232-25+deb9u12\n  and 4 more...\n...\n```\n\nThe plugin also supports the various arguments for modifying the chart, including `--set` and `--values`. So for instance you can test the same chart but override the image tag like so: \n\n```console\nhelm snyk test --set image.tag=latest\n```\n\nAs well as the user-friendly output above the plugin also supports outputting the results as a JSON document. This can be useful for further analysis or integration with other tooling.\n\n```console\n$ helm snyk test stable/mysql --json\n{\n  \"helmChart\": \"mysql@1.3.0\",\n  \"images\": [\n    {\n      \"imageName\": \"dduportal/bats:0.4.0\",\n      \"results\": {\n        \"vulnerabilities\": [\n          {\n            \"CVSSv3\": null,\n            \"creationTime\": \"2019-02-06T14:40:43.295348Z\",\n            \"credit\": [\n              \"\"\n            ],\n            \"cvssScore\": null,\n            \"description\": \"## Overview\\nCVE-2011-3374\",\n            \"disclosureTime\": null,\n            \"id\": \"SNYK-LINUX-APT-116518\",\n            \"identifiers\": {\n              \"ALTERNATIVE\": [\n                \"SNYK-DEBIAN8-APT-407500\",\n...\n```\n\nFor further options and features see the help instructions with the `--help` flag.\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsnyk-labs%2Fhelm-snyk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsnyk-labs%2Fhelm-snyk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsnyk-labs%2Fhelm-snyk/lists"}