Google launches new tool to identify open source vulnerabilities
The Go-based tool — called OSV-Scanner — provides an automated capability to match a developer’s code and dependencies against lists of known vulnerabilities and deliver instant feedback if patches or updates are needed.
Source: scmagazine.com