Google launches OSV-Scanner to help identify vulnerabilities in open source software
Google has announced a new tool designed to help identify vulnerabilities in open source software.
Stay updated with breaking news from Rustsec Advisory Database. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Google has announced a new tool designed to help identify vulnerabilities in open source software.
The OSV schema aims to precisely describe vulnerabilities in a way tailored to the open source use case, "with the goal of automating and improving vulnerability triage for developers and users of open source software," Google stated in a blog post published on June 24. The project could allow various developer tools to natively handle vulnerability information and make it easier for users of open source components to know whether particular vulnerabilities affect their applications. The aim is to reduce the effort required to document vulnerabilities in open source projects, to make the is...