Skip to content

Commit 897fd01

Browse files
Add Snapper security scanning tool (#1830)
* Add Snapper security scanning tool * Add notes to Snaps Get Allowlisted --------- Co-authored-by: Christian Montoya <[email protected]>
1 parent 904cca2 commit 897fd01

File tree

2 files changed

+7
-0
lines changed

2 files changed

+7
-0
lines changed

snaps/how-to/get-allowlisted.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,11 @@ Always do your own research before installing a Snap.
3232
- Is [published](publish-a-snap.md) to npm.
3333
- Does not impair MetaMask's compliance with laws or regulations.
3434

35+
- Remove any `console` logs, "to-do" comments, and unused permissions or methods.
36+
37+
- Scan your Snap for security vulnerabilities using [Snapper](https://github.com/sayfer-io/Snapper) and
38+
resolve any reported issues.
39+
3540
- If your Snap uses any of the following API methods related to key management, you must provide
3641
evidence of a third-party audit from an approved auditor:
3742

snaps/learn/resources.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,8 @@ View the following Snaps resources in addition to this documentation site.
5555
- [Snaps Simulator](https://metamask.github.io/snaps/snaps-simulator/latest) - A tool for simulating
5656
Snaps in the browser, streamlining the development process. It doesn't support all Snaps features
5757
but can be useful for testing certain features.
58+
- [Snapper](https://github.com/sayfer-io/Snapper) - A tool for detecting security vulnerabilities,
59+
identifying potential issues, and ensuring best coding practices in your Snap.
5860
- [MetaMask Testing Tools](https://hugomrdias.github.io/metamask/) - A collection of tools for
5961
testing MetaMask, MetaMask Flask, and MetaMask Snaps with [Playwright](https://playwright.dev/),
6062
delivered as an npm package that provides a `createFixture` function that returns a `test` and

0 commit comments

Comments
 (0)