SafeDep Documentation

For SafeDep Cloud, refer to Cloud Quickstart

Use SafeDep Vet to detect security risks and apply policy-based controls that block vulnerable or malicious open source dependencies.

Installation

Homebrew (macOS/Linux)

brew tap safedep/tap
brew install safedep/tap/vet

Container Image

docker run --rm -it ghcr.io/safedep/vet:latest version

Pre-built Binary

Download a pre-built binary suitable for your OS at GitHub Releases

For additional installation options, see Vet’s README.

Running Your First Scan

Scan a source code repository, auto-discovering well-known manifest files:

vet scan -D /path/to/dir

Other scanning options

Scan a single file

vet scan -M package-lock.json

Scan a PURL

vet scan --purl pkg:npm/[email protected]

Scan a Java JAR file

vet scan -M /path/to/my-app.jar

Scan an OCI image

vet scan --image ghcr.io/safedep/vet:latest

For more scanning options, see Vet’s README.

Policy as Code

vet supports a CEL-based policy language for identifying risks. Scan and fail on critical or high vulnerabilities:

vet scan -D /path/to/dir \
  --filter '(vulns.critical.size() > 0) || (vulns.high.size() > 0)' \
  --filter-fail

Advanced Policy Configuration

Combine multiple CEL queries into a policy suite (example) and audit your application:

vet scan -D /path/to/dir \
  --filter-suite /path/to/policy.yml \
  --filter-fail

Setup CI/CD Guardrails

vet includes a native GitHub Action for policy-driven guardrails against risky OSS components.

GitHub Integration

Setup Vet with GitHub Actions and Code Scanning

GitLab Integration

Integrate Vet with GitLab CI/CD pipelines

Policy Configuration

Learn advanced policy configuration with CEL

Cloud Platform

Scale across your organization with SafeDep Cloud

What’s Next?

See the Vet GitHub Repository for the latest documentation on usage and advanced features.
For vet’s complete commands, sub-commands, flags, and usage documentation, see the Vet CLI Reference Manual.

​Installation

​Running Your First Scan

​Other scanning options

​Policy as Code

​Advanced Policy Configuration

​Setup CI/CD Guardrails

GitHub Integration

GitLab Integration

Policy Configuration

Cloud Platform

​What’s Next?

Installation

Running Your First Scan

Other scanning options

Policy as Code

Advanced Policy Configuration

Setup CI/CD Guardrails

What’s Next?