GitHub - google/osv-scanner: Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner supports a wide range of project types, package managers and features, including but not limited to: La

[tmatsuu]

osv.devが提供する情報をもとにした脆弱性スキャナー。プロジェクトが依存するライブラリ、いわゆるサプライチェーンやSBOMなどのスキャンがメインか。

[sea295x2]

Googleの脆弱性スキャナ

[kakushika]

SBOM