This V2 release builds upon the foundation we laid with OSV-SCALIBR and adds significant new capabilities to OSV-Scanner, making it a comprehensive vulnerability scanner and remediation tool with broad support for formats and ecosystems. (Google)

#securityland #skillslab #securityarsenal #cybertools #vulnerabilitymanagement #osvscanner #google #opensource

https://www.security.land/google-releases-osv-scanner-v2-0-0-enhanced-open-source-vulnerability-management-tool/

OSV-Scanner:
➡️ Find existing vulnerabilities affecting your project's dependencies.

➡️ Provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them.

➡️ Each advisory comes from an open and authoritative source (e.g. the RustSec Advisory Database)

➡️ Anyone can suggest improvements to advisories, resulting in a very high quality database

➡️ The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer’s list of packages

Repo:
https://github.com/google/osv-scanner

Blog:
https://security.googleblog.com/2022/12/announcing-osv-scanner-vulnerability.html?m=1
#golang

Site:
https://osv.dev//#use-the-cli

#infosec #websecurity #osv #osvscanner #devsecops