Support for uv and `uv.lock` file?

[czechnology]

Docs specify that Snyk supports

pip with a requirements.txt file
pipenv with a Pipfile file
poetry with pyproject.toml and poetry.lock

How about uv support for the uv.lock lock file?

[czechnology]

Pete also mentioned in #248 that they use uv to manage their dependencies, however, they use the pip-like requirements*.txt lock files.

[jmahlik]

This might be somewhat blocked by #259 since the plugin assumes pip is installed. uv creates venvs without pip.

[vancromy]

There's quite a few folks over at uv wanting this to become a reality too: astral-sh/uv#11181 :)

[etele]

Back when i created the issue on uv side i also sent a mail to snyk support
Support answered me they pushing the question product management, no info on it yet.

The same question on the (unofficial?) snyk discord left unanswered.

Snyk currently supports only poetry v1, poetry v2 also has a lot of changes to move to the same standard(PEP 621) as uv uses, somehow i hope they wont drop support on poetry v2 and when they get to that its just a small step to support uv (but i might be wrong cause of what @jmahlik mentioned).

[menzenski]

Is there any update on this?

[petur-einarsson-IAG]

Any update on this?

[jsutherland-snyk]

Hi, we plan to support uv in both the CLI and SCM integration early in 2026. Please keep an eye on the Snyk Updates page.

[ryanpetrello]

Hey @jsutherland-snyk, is this still on plan for early 2026? Thanks.

[jsutherland-snyk]

Hi @ryanpetrello, yes, that is still the plan. We are currently working on support for snyk test, snyk monitor, and snyk sbom in the CLI with the SCM following later in the year. We'll announce it in the next couple of weeks.

[axieum]

I can see that there is experimental uv support now.

Org [REDACTED] doesn't have 'enable-uv-cli' feature enabled
uv.lock found, uv feature flag from registry: false
... Experimental uv Support: false ...

[axieum]

You can read more about Snyk + UV here: https://snyk.io/blog/snyk-uv-partnership/

"Native support for uv is currently available to Enterprise customers as part of a private preview to gather feedback ahead of an Early Access launch planned for all customers and free users in April 2026."

[bluet]

it seems that it's in Snyk Preview and needs to be enabled. I'm testing. Anyone got it working?

ref:

• https://docs.snyk.io/supported-languages/supported-languages-list/python/cli-support-for-uv
• https://docs.snyk.io/snyk-platform-administration/snyk-preview