osv-scanner
Dependency checks against vulnerability data
What it does
OSV-Scanner checks dependencies using OSV vulnerability data and supports scanning workflows for repositories and associated input formats that describe the packages present in a project’s maintained source or software inventory.
When to use it
For known package vulnerabilities, inspect supported formats and result explanations before relating package versions to the application’s actual reachable code paths.
