code.osv-scannerosv-scanner dependency scan
Runs Google's osv-scanner recursively over lockfiles and SBOMs to find known-vulnerable dependencies.
- Engine
- Wrapped scanner
- Wraps
osv-scanner- Targets
- Codebase
- Areas
- Supply chain, Security
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.osv-scannerWraps osv-scanner. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.