home.social

#osvscanner — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #osvscanner, aggregated by home.social.

fetched live
  1. OSV-Scanner:
    ➡️ Find existing vulnerabilities affecting your project's dependencies.

    ➡️ Provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them.

    ➡️ Each advisory comes from an open and authoritative source (e.g. the RustSec Advisory Database)

    ➡️ Anyone can suggest improvements to advisories, resulting in a very high quality database

    ➡️ The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer’s list of packages

    Repo:
    github.com/google/osv-scanner

    Blog:
    security.googleblog.com/2022/1
    #golang

    Site:
    osv.dev//#use-the-cli

    #infosec #websecurity #osv #osvscanner #devsecops