Skip to main content
For SafeDep Cloud, refer to Cloud Quickstart
Use SafeDep Vet to detect security risks and apply policy-based controls that block vulnerable or malicious open source dependencies.

​
Installation

brew tap safedep/tap
brew install safedep/tap/vet

docker run --rm -it ghcr.io/safedep/vet:latest version
Download a pre-built binary suitable for your OS at GitHub Releases
For additional installation options, see Vet’s README.

​
Running Your First Scan

Scan a source code repository, auto-discovering well-known manifest files: 
vet scan -D /path/to/dir
vet scanning a directory

​
Other scanning options

vet scan -M package-lock.json

vet scan --purl pkg:npm/[email protected]

vet scan -M /path/to/my-app.jar

vet scan --image ghcr.io/safedep/vet:latest
For more scanning options, see Vet’s README.

​
Policy as Code

vet supports a CEL-based policy language for identifying risks. Scan and fail on critical or high vulnerabilities: 
vet scan -D /path/to/dir \
  --filter '(vulns.critical.size() > 0) || (vulns.high.size() > 0)' \
  --filter-fail

​
Advanced Policy Configuration

Combine multiple CEL queries into a policy suite (example) and audit your application: 
vet scan -D /path/to/dir \
  --filter-suite /path/to/policy.yml \
  --filter-fail

​
Setup CI/CD Guardrails

vet includes a native GitHub Action for policy-driven guardrails against risky OSS components. vet guardrails in GitHub

GitHub Integration

Setup Vet with GitHub Actions and Code Scanning

GitLab Integration

Integrate Vet with GitLab CI/CD pipelines

Policy Configuration

Learn advanced policy configuration with CEL

Cloud Platform

Scale across your organization with SafeDep Cloud

​
What’s Next?