The safeguards map / 1.1 Code and dependencies
OSV-Scanner
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Finds known vulnerabilities affecting a project's dependencies by matching them against the OSV database.
Where it sits
1.1 Code and dependencies (primary): Matches a project's dependencies against the OSV vulnerability database and reports which known vulnerabilities affect them.
Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies.
captured
OSV-Scanner provides an officially supported frontend to the [OSV database](https://osv.dev/)
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by handin CI
Handoffs
produces Findings: SARIF v2.1.0
consumes Vulnerability status: OSV
Collector's note
Google's open source project. The OSV schema is hosted by OpenSSF, but the scanner's own README names no foundation, so it has no foundation home here.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.