osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Discover how OSV-Scanner's version matching algorithm accurately detects vulnerabilities using semantic versioning, explicit lists, and commit hash matching for precise security analysis.
Troubleshooting OSV-Scanner Scanning Issues: A Complete Guide to Fixing Common ErrorsFix osv-scanner scanning issues like no packages found or extraction errors. Learn troubleshooting steps for lockfiles, exclude patterns, and extractor plugins.
Internal Architecture of the OSV-Scanner Security Scanning Engine: A Deep Dive into the Source CodeExplore the internal architecture of the OSV-Scanner security scanning engine. Discover how it transforms source code into vulnerability reports via its pipeline. Learn more.
How osv-scanner Processes CycloneDX SBOM Files for Security AnalysisLearn how osv-scanner processes CycloneDX SBOM files for security analysis. Discover component details and vulnerability mapping for enhanced software supply chain security.
How to Configure Package Overrides in the OSV-Scanner Configuration FileLearn to configure package overrides in the osv-scanner configuration file create an osv-scanner.toml file to manage vulnerabilities by defining ignore and override actions for specific packages.
How OSV-Scanner Groups Related Vulnerabilities and Manages AliasesDiscover how OSV-Scanner groups related vulnerabilities by converting OSV records to ID-alias representations and merging them using a union-find algorithm. Learn alias management.
Functional Difference Between OSV-Scanner's --recursive and --no-ignore FlagsUnderstand osv-scanner's --recursive and --no-ignore flags. Discover how recursive scans find lockfiles in subdirectories and --no-ignore forces inclusion of ignored files.
How OSV-Scanner Handles Deprecated Packages: Detection, Filtering, and ReportingLearn how OSV-Scanner detects, filters, and reports deprecated packages. Discover security findings even without CVEs using its dedicated deprecation plugin.
How to Use Experimental Exclude Patterns in osv-scanner ScansLearn how to use experimental exclude patterns in osv-scanner scans with the --experimental-exclude flag. Skip directories using exact matches, globs, or regex for precise vulnerability scanning.
How osv-scanner Determines and Assigns Severity Ratings to Detected VulnerabilitiesLearn how osv-scanner assigns severity ratings. It parses CVSS vectors and Ubuntu severities, calculates scores using go-cvss, and converts them to Critical/High/Medium/Low for clear reporting.
MCP Server Integration in OSV-Scanner: Complete Guide to LLM-Based Vulnerability ScanningMaster MCP server integration in OSV-Scanner for LLM-based vulnerability scanning. Access dependency scans and advisory details via JSON-RPC. Explore the complete guide.
How OSV-Scanner Analyzes Transitive Dependencies for VulnerabilitiesLearn how OSV-Scanner analyzes transitive dependencies to find vulnerabilities. Discover its use of deps.dev and the OSV database for comprehensive security scanning.
Have a question about this repo?
These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:
curl -s "https://instagit.com/install.md" 
Maintain an open-source project? Get it listed too →