vpominchuk/osv-scanner : latest
Use Google OSV-Scanner to find existing vulnerabilities affecting your project's dependencies.
Latest release: over 2 years ago - 28 downloads - 223 dependencies
JSONDependencies
- sentry/sdk 2.0.4
- ast 2.4.2
- go 1.19.4
- CycloneDX/gh-gomod-generate-sbom v1
- actions/checkout 755da8c3cf115ac066823e79a1e1788f8940201b
- actions/checkout main
- actions/checkout master
- actions/checkout v2
- actions/checkout v3
- actions/checkout v3.0.2
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568
- actions/setup-go v2
- actions/setup-go v3
- actions/setup-go v3.3.0
- actions/setup-node v3
- actions/upload-artifact 83fd05a356d7e2593de66fc9913b3002723633cb
- apache/skywalking-eyes v0.4.0
- codecov/codecov-action v3
- github/codeql-action 896079047b4bb059ba6f150a5d87d47dde99e6e5
- github/codeql-action 896079047b4bb059ba6f150a5d87d47dde99e6e5
- github/codeql-action 896079047b4bb059ba6f150a5d87d47dde99e6e5
- github/codeql-action 959cbb7472c4d4ad70cdfe6f4976053fe48ab394
- golangci/golangci-lint-action v3.1.0
- golangci/golangci-lint-action v3.2.0
- goreleaser/goreleaser-action 8f67e590f2d095516493f017008adc464e63adb1
- goreleaser/goreleaser-action v3
- ossf/scorecard-action 99c53751e09b9529366343771cc321ec74e9bd3d
- shogo82148/actions-goveralls v1
- cmd/addr2line (devel)
- cmd/asm (devel)
- cmd/buildid (devel)
- cmd/cgo (devel)
- cmd/compile (devel)
- cmd/cover (devel)
- cmd/dist (devel)
- cmd/doc (devel)
- cmd/fix (devel)
- cmd/go (devel)
- cmd/gofmt (devel)
- cmd/link (devel)
- cmd/nm (devel)
- cmd/objdump (devel)
- cmd/pack (devel)
- cmd/pprof (devel)
- cmd/test2json (devel)
- cmd/trace (devel)
- cmd/vet (devel)
- github.com/BurntSushi/toml v1.2.1
- github.com/CycloneDX/cyclonedx-go v0.7.0
- github.com/bradleyjkemp/cupaloy/v2 v2.8.0
- github.com/cpuguy83/go-md2man/v2 v2.0.2
- github.com/davecgh/go-spew v1.1.1
- github.com/google/go-cmp v0.5.8
- github.com/google/go-cmp v0.5.9
- github.com/google/osv-scanner v1.0.2
- github.com/google/pprof v0.0.0-20220729232143-a41b82acbcb1
- github.com/ianlancetaylor/demangle v0.0.0-20220319035150-800ac71e25c2
- github.com/jedib0t/go-pretty/v6 v6.4.3
- github.com/mattn/go-runewidth v0.0.13
- github.com/mmcloughlin/avo v0.2.0
- github.com/package-url/packageurl-go v0.1.0
- github.com/pkg/profile v1.6.0
- github.com/pmezard/go-difflib v1.0.0
- github.com/rivo/uniseg v0.2.0
- github.com/russross/blackfriday/v2 v2.1.0
- github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb
- github.com/spdx/tools-golang v0.3.0
- github.com/stretchr/testify v1.7.4
- github.com/stretchr/testify v1.8.0
- github.com/urfave/cli/v2 v2.23.7
- github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673
- golang.org/x/arch v0.0.0-20220412001346-fc48f9fe4c15
- golang.org/x/crypto v0.0.0-20220516162934-403b01795ae8
- golang.org/x/exp v0.0.0-20221212164502-fae10dda9338
- golang.org/x/mod v0.6.0
- golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
- golang.org/x/mod v0.7.0
- golang.org/x/net v0.0.0-20220907013720-d52c520e3766
- golang.org/x/sync v0.0.0-20220513210516-0976fa681c29
- golang.org/x/sys v0.0.0-20190412213103-97732733099d
- golang.org/x/sys v0.0.0-20220614162138-6c1b26c55098
- golang.org/x/sys v0.1.0
- golang.org/x/sys v0.3.0
- golang.org/x/term v0.0.0-20220411215600-e5f449aeb171
- golang.org/x/term v0.3.0
- golang.org/x/text v0.3.8-0.20220509174342-b4bca84b0361
- golang.org/x/tools v0.1.11-0.20220516163903-1e55371df567
- golang.org/x/tools v0.1.12
- golang.org/x/tools v0.2.0
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v3 v3.0.1
- stdlib 1.19.4
- com.acme:tomcat-catalina 9.0.14
- com.example:myapplication 1.0.0
- com.example:myframework 1.0.0
- @discoveryjs/json-ext 0.5.6
- @types/eslint-scope 3.7.1
- @types/eslint 8.2.1
- @types/estree 0.0.50
- @types/json-schema 7.0.9
- @types/node 16.11.11
- @webassemblyjs/ast 1.11.1
- @webassemblyjs/floating-point-hex-parser 1.11.1
- @webassemblyjs/helper-api-error 1.11.1
- @webassemblyjs/helper-buffer 1.11.1
- @webassemblyjs/helper-numbers 1.11.1
- @webassemblyjs/helper-wasm-bytecode 1.11.1
- @webassemblyjs/helper-wasm-section 1.11.1
- @webassemblyjs/ieee754 1.11.1
- @webassemblyjs/leb128 1.11.1
- @webassemblyjs/utf8 1.11.1
- @webassemblyjs/wasm-edit 1.11.1
- @webassemblyjs/wasm-gen 1.11.1
- @webassemblyjs/wasm-opt 1.11.1
- @webassemblyjs/wasm-parser 1.11.1
- @webassemblyjs/wast-printer 1.11.1
- @webpack-cli/configtest 1.1.0
- @webpack-cli/info 1.4.0
- @webpack-cli/serve 1.6.0
- @xtuc/ieee754 1.2.0
- @xtuc/long 4.2.2
- acme/component 1.0.0
- acorn-import-assertions 1.8.0
- acorn 8.6.0
- ajv-keywords 3.5.2
- ajv 6.12.6
- balanced-match 1.0.2
- browserslist 4.18.1
- buffer-from 1.1.2
- caniuse-lite 1.0.30001284
- chrome-trace-event 1.0.3
- clone-deep 4.0.1
- colorette 2.0.16
- commander 2.20.3
- cross-spawn 7.0.3
- d3-color 1.4.1
- d3-flame-graph 4.1.3
- d3-interpolate 1.4.0
- d3-pprof 2.0.0
- d3-selection 3.0.0
- d3-time-format 2.3.0
- d3-time 1.1.0
- d3-timer 1.0.10
- electron-to-chromium 1.4.11
- enhanced-resolve 5.8.3
- envinfo 7.8.1
- es-module-lexer 0.9.3
- escalade 3.1.1
- eslint-scope 5.1.1
- esrecurse 4.3.0
- estraverse 4.3.0
- events 3.3.0
- execa 5.1.1
- fast-deep-equal 3.1.3
- fast-json-stable-stringify 2.1.0
- fastest-levenshtein 1.0.12
- find-up 4.1.0
- function-bind 1.1.1
- get-stream 6.0.1
- glob-to-regexp 0.4.1
- graceful-fs 4.2.8
- has-flag 4.0.0
- has 1.0.3
- human-signals 2.1.0
- import-local 3.0.3
- internmap 2.0.3
- interpret 2.2.0
- is-core-module 2.8.0
- is-plain-object 2.0.4
- is-stream 2.0.1
- isexe 2.0.0
- isobject 3.0.1
- jest-worker 27.4.2
- json-parse-better-errors 1.0.2
- json-schema-traverse 0.4.1
- kind-of 6.0.3
- loader-runner 4.2.0
- locate-path 5.0.0
- merge-stream 2.0.0
- mime-db 1.51.0
- mime-types 2.1.34
- mimic-fn 2.1.0
- neo-async 2.6.2
- node-releases 2.0.1
- npm-run-path 4.0.1
- onetime 5.1.2
- p-limit 2.3.0
- p-locate 4.1.0
- p-try 2.2.0
- path-exists 4.0.0
- path-key 3.1.1
- path-parse 1.0.7
- picocolors 1.0.0
- pkg-dir 4.2.0
- punycode 2.1.1
- randombytes 2.1.0
- rechoir 0.7.1
- resolve-cwd 3.0.0
- resolve-from 5.0.0
- resolve 1.20.0
- safe-buffer 5.2.1
- schema-utils 3.1.1
- serialize-javascript 6.0.0
- shallow-clone 3.0.1
- shebang-command 2.0.0
- shebang-regex 3.0.0
- signal-exit 3.0.6
- source-map-support 0.5.21
- source-map 0.6.1
- strip-final-newline 2.0.0
- supports-color 8.1.1
- tapable 2.2.1
- terser-webpack-plugin 5.2.5
- terser 5.10.0
- uri-js 4.4.1
- watchpack 2.3.0
- webpack-cli 4.9.1
- webpack-merge 5.8.0
- webpack-sources 3.2.2
- webpack 5.64.4
- which 2.0.2
- wildcard 2.0.0