What is the difference between snyk 'test', 'protect' and 'monitor'?

Here we describe what the differences are between some of our CLI commands

There are various commands you can use with Snyk on the command line and they all do different things. The best way to know about all of them is to query our help using snyk help

snyk test will test your dependencies for vulnerabilities and tell you how many vulnerabilities are found. It will return a non-zero exit code which will cause a build to fail when run inside of CI environments (depending on how the CI tool is configured)

snyk wizard configures your policy file to update, auto patch and ignore vulnerabilities in npm & yarn projects. snyk wizard updates your .snyk file automatically.

snyk protect is used to apply patches to your vulnerable dependencies. It's useful after opening a fix pull request from our website (GitHub only) or after running snyk wizard on the CLI. snyk protect reads a .snyk policy file to determine what patches to apply.

snyk monitor can be used from the CLI to create a project on the Snyk website that will be continuously monitored for new vulnerabilities. After running this command you will see it by logging in to the website and viewing your projects.

Articles in this section

Here we describe what the differences are between some of our CLI commands