← All repos

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

GitHubgoogle.github.io/osv-scanner/
scannersecurity-auditsecurity-toolsvulnerability-scanner
Browse cluster: Claude AI Agent Frameworks & MCP Tools →
1,976commits
115contributors
12languages

Tech stack & purpose

OSV-Scanner is a vulnerability scanner written in Go that leverages vulnerability data from OSV.dev to identify security issues in project dependencies. It serves as an officially supported frontend to the OSV database and provides a CLI interface to the OSV-Scalibr library, which handles the core dependency extraction and analysis. The tool supports a broad range of programming languages—including C/C++, Go, Java, JavaScript, Python, and Rust—and package managers such as npm, pip, cargo, and maven, along with container image scanning and OS package detection on Linux systems. OSV-Scanner is developed by Google and includes features like guided remediation recommendations and call analysis to reduce false positives.

Languages

Go
87.3%
Python
3.6%
Go Template
2.2%
JavaScript
1.8%
CSS
1.1%
Java
1.0%
Shell
0.6%
PHP
0.6%
Dockerfile
0.5%
R
0.5%
Ruby
0.4%
Makefile
0.2%

Contributors (top 30 of 115)