Scanning Snaps for Vulnerabilities

Hello, friends! I made something that might be useful for Ubuntu users who rely on snaps. It scans snaps for vulnerabilities. It’s called SnapScope, and you can see it at

https://snapscope.popey.com/

It scans any snap package you specify that is publicly available on the Snap Store. Each snap has a page where you can view the previously scanned revisions and results.

I made a 5-minute video to show you around:

https://www.youtube.com/watch?v=-hB2Z2xI5vY

Feedback and suggestions welcome!

7 Likes

I personally hate SNAPs, but love the concept and intent!

If this kind of tool wasn’t already out there (which blows my mind, given the push and resources promoting/implementing SNAP-based solutions), I thank you for taking this initiative and commend you for stepping forward in your attempts to serve the Community.

I hope it turns out very well … enough to garner some official support, and maybe some funding, that could turn it into a cornerstone of the SNAP-based eco-system.

Well-done!

:slight_smile:

I might like to try this out.

I have some older snaps that I am not sure what to do with. They might be old for a reason, or maybe not. I took a quick pic of them here:

Is there any way to take an inventory of installed snaps, and then compare to current, to make sure nothing is missing or broken?

Thank you!

1 Like

That’s cool. I maintain a snap but have never gotten those (monthly?) warnings about potentially vulnerabilities. So at least this tells me there’s no known issues.

1 Like

To see currently-installed snaps:

snap list

To ensure that they’re all up to date:

sudo snap refresh

@popey — Alan, that’s marvellous, thank you! I second the hope that this becomes an official addition to the Ubuntu family.

By the way, maybe add the video link to the SnapScope home page?

Great idea @paddylandau - I added an About page.

2 Likes

Snaps do quietly refresh themselves in the background if there is anything new published by the maintainer, they check 4 times per day for updates and install any new revision automatically, there is nothing you need to do unless you turned off these automatic checks …

See:

https://snapcraft.io/docs/managing-updates

2 Likes

Yeah, I’ve done that. Some of the ones I have just looked old in pic above, so I thought maybe they got missed or skipped over. Thank you.

Yeah, I don’t recall ever “putting a snap on hold”. But this is a good and useful link.