Search results

Scanning <code>osv-scanner.json</code> format does not correctly output spdx

Status: Open.

#2192 In google/osv-scanner;

· another-rex opened on Aug 18, 2025

<code>--license</code> for the go standard library shows up as UNKNOWN

Status: Open.

#2191 In google/osv-scanner;

· another-rex opened on Aug 18, 2025

Make it clearer that the <code>--experimental-plugins</code> flag disables existing plugins

Status: Open.

#2178 In google/osv-scanner;

· another-rex opened on Aug 13, 2025

Support osv-scanner-custom.json as a scannable file type.

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

Status: Open.

#2174 In google/osv-scanner;

· another-rex opened on Aug 11, 2025

<code>--all-packages</code> flag should also show unscannable filtered packages.

enhancementNew feature or requestNew feature or request

goPull requests that update Go codePull requests that update Go code

good first issueGood for newcomersGood for newcomers

Status: Open.

#2157 In google/osv-scanner;

· another-rex opened on Aug 8, 2025

Regression in requirements.txt since 2.1.0

Status: Open.

#2152 In google/osv-scanner;

· egonk opened on Aug 7, 2025

Filter projects before package extraction

enhancementNew feature or requestNew feature or request

performance

Status: Open.

#2149 In google/osv-scanner;

· hogo6002 opened on Aug 7, 2025

Add distinct status code for vulnerabilities with available fixes

Status: Open.

#2145 In google/osv-scanner;

· brabster opened on Aug 6, 2025

SBOM scanning should guess release number from the PURL.

enhancementNew feature or requestNew feature or request

Status: Open.

#2055 In google/osv-scanner;

· another-rex opened on Jul 10, 2025

Offline scan for custom lockfile (C/C++ project from git project) skipped

Status: Open.

#2014 In google/osv-scanner;

· cybops35 opened on Jul 3, 2025

False Positive MAL-s across namespaces

Status: Open.

#2009 In google/osv-scanner;

· jess-lowe opened on Jul 1, 2025

Ignore test fixtures for dependabot security updates

Status: Open.

#2007 In google/osv-scanner;

· cuixq opened on Jun 29, 2025