{"data":{"slug":"osv-scanner","name":"OSV-Scanner","tagline":"Apache-2.0 OSV.dev vulnerability scanner for lockfiles and images","category":"devops","categoryName":"DevOps","url":"https://google.github.io/osv-scanner/","github":"https://github.com/google/osv-scanner","pricing":"open-source","hook":"OSV-Scanner is Google’s CLI onto OSV.dev when you want lockfile/SBOM/image vulns from an open database, not a closed advisory feed.","whatsGood":"Apache-2.0. google/osv-scanner. Official frontend to OSV.dev (+ OSV-Scalibr): scan source, lockfiles, SBOMs, and container images; offline DB mode; license scan path. Docs at google.github.io/osv-scanner; source github.com/google/osv-scanner. Slug is `osv-scanner`.","theCatch":"Vs Trivy/Grype (broader/image-first scanners) and Syft (*SBOM producer*): OSV-Scanner is the OSV.dev-native vuln CLI, not a replacement for every Trivy filesystem/misconfig check and not the SBOM generator. Complements those tools; do not expect identical CVE sets. Networked API unless you go `--offline`.","verdict":"Apache-2.0 OSV.dev scanner. Free forever; pair with Trivy/Grype/Syft, do not clone them.","addedAt":"2026-09-13","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","local-first","permissive","security","active"],"capabilities":["vuln","sbom","cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":11206,"starsPerWeek":55,"access":"free","archived":false,"repo":{"createdAt":"2022-11-14","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"github-actions","name":"GitHub Actions","tagline":"CI/CD that lives where your code does"},{"slug":"docker","name":"Docker","tagline":"Container runtime that changed deployment"},{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale"},{"slug":"pulumi","name":"Pulumi","tagline":"Infrastructure as code in real languages"},{"slug":"fly-io","name":"Fly.io","tagline":"Deploy apps to VMs close to your users"}],"links":{"self":"/api/gems/osv-scanner","html":"/gems/osv-scanner","markdown":"/gems/osv-scanner.md","category":"/api/gems?category=devops","categoryPage":"/stacks/devops"}}