Skip to content

Conversation

@ptzianos
Copy link
Contributor

This is a complete refactoring of the OSV scanner. The OSV scanner is written in Go, so there is no reason for us to not use it a s a library so that we can configure it more easily and not having to parse its output from a file but directly use the data structures from it and convert them into OCSF.
Under normal circumstances, OSV scanner scans the entire repository for dependency files and outputs the results. We are not interested in tackling every single language out there, we are interested in producing good results, so for the time being we dedicate the scanner to Go, JS and Elixir, with more to be added as time goes. The results should always contain the lines of the dependency file where a vulnerable file is declared

@ptzianos ptzianos force-pushed the ptzianos/refactor-osv-scanner branch from a275617 to b756634 Compare November 18, 2025 10:50
@ptzianos ptzianos force-pushed the ptzianos/refactor-osv-scanner branch 3 times, most recently from dd67cfd to 08d2b59 Compare November 19, 2025 14:44
@ptzianos ptzianos force-pushed the ptzianos/refactor-osv-scanner branch from 08d2b59 to 15789ea Compare November 19, 2025 20:34
@senglezou senglezou merged commit f1b0aa0 into main Nov 20, 2025
7 checks passed
@senglezou senglezou deleted the ptzianos/refactor-osv-scanner branch November 20, 2025 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants