osv-scanner: Finds existing vulnerabilities affecting project dependencies.
What problem it solves Developers need to identify known vulnerabilities across the dependencies, operating-system packages, and container layers used by their projects. They also need actionable findings and upgrade guidance for resolving affected dependencies. Key features Source-directory scanning — Recursively scans directories for supported package files and reports discovered vulnerabilities…
github.comhttps://github.com/google/osv-scanner