2025-03-14 21:59:59 -06:00
|
|
|
# osv-scanner
|
|
|
|
|
|
|
|
|
|
> Scan various mediums for dependencies and matches them against the OSV database.
|
2026-02-18 06:55:01 -07:00
|
|
|
> More information: <https://google.github.io/osv-scanner/usage/>.
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Scan a Docker image:
|
|
|
|
|
|
|
|
|
|
`osv-scanner -D {{docker_image_name}}`
|
|
|
|
|
|
|
|
|
|
- Scan a package lockfile:
|
|
|
|
|
|
|
|
|
|
`osv-scanner -L {{path/to/lockfile}}`
|
|
|
|
|
|
|
|
|
|
- Scan an SBOM file:
|
|
|
|
|
|
|
|
|
|
`osv-scanner -S {{path/to/sbom_file}}`
|
|
|
|
|
|
|
|
|
|
- Scan multiple directories recursively:
|
|
|
|
|
|
|
|
|
|
`osv-scanner -r {{directory1 directory2 ...}}`
|
|
|
|
|
|
|
|
|
|
- Skip scanning Git repositories:
|
|
|
|
|
|
|
|
|
|
`osv-scanner --skip-git {{-r|-D}} {{target}}`
|
|
|
|
|
|
|
|
|
|
- Output result in JSON format:
|
|
|
|
|
|
|
|
|
|
`osv-scanner --json {{-D|-L|-S|-r}} {{target}}`
|
