1 Release published by 1 person

• v2.0.0

  published Mar 17, 2025

8 Pull requests merged by 5 people

• fix: remove OpenHTML()

  #1727 merged Mar 21, 2025

• chore(deps): update workflows

  #1713 merged Mar 19, 2025

• fix(deps): update osv-scanner minor

  #1714 merged Mar 19, 2025

• chore(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.27 in the go_modules group across 1 directory

  #1719 merged Mar 19, 2025

• test: update snapshots

  #1722 merged Mar 19, 2025

• feat: add test for Ubuntu images

  #1678 merged Mar 18, 2025

• chore: Update documentation lockfile

  #1715 merged Mar 17, 2025

• chore: V2 release changelog

  #1711 merged Mar 16, 2025

7 Pull requests opened by 6 people

• chore: explicitly allow linting errors from `package-comments`

  #1720 opened Mar 18, 2025

• refactor: Maintain consistent warning messages with slog.Warn

  #1725 opened Mar 20, 2025

• fix: De-dup the output results in the cycloneDX reporter (#1564)

  #1726 opened Mar 20, 2025

• fix: add spacing in logged serve url

  #1728 opened Mar 21, 2025

• feat: Add support for more .NET extrators

  #1730 opened Mar 23, 2025

• chore(deps): update workflows

  #1731 opened Mar 23, 2025

• fix(deps): update module github.com/owenrumney/go-sarif/v2 to v3

  #1732 opened Mar 23, 2025

4 Issues closed by 3 people

• Can we disable OpenHTML?

  #1721 closed Mar 21, 2025

• unknown block type: tool

  #1682 closed Mar 20, 2025

• Help to understand why the vulnerability CVE-2025-27607 is not in the OSV.dev database

  #1718 closed Mar 18, 2025

• Add Ubuntu JSON tests

  #1652 closed Mar 18, 2025

2 Issues opened by 2 people

• License Scanner fail on Python packages without the License metadata key.

  #1729 opened Mar 21, 2025

• osv-scanner 2.0 does not consider nested components in CycloneDX SBOM

  #1717 opened Mar 17, 2025

4 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Toolchain directive in go.mod not being considered

  #1606 commented on Mar 17, 2025 • 0 new comments

• Converge OSV-Scanner OSV-Scalibr feature set

  #1701 commented on Mar 19, 2025 • 0 new comments

• Dependency Dashboard

  #6 commented on Mar 23, 2025 • 0 new comments

• feat: make `vertical` output the default

  #1712 commented on Mar 16, 2025 • 0 new comments