Google has released OSV-Scanner, a vulnerability scanner that considers dependencies
Google has introduced the OSV-Scanner toolkit for checking for unpatched vulnerabilities in code and applications, considering the entire chain of dependencies related to the code. OSV-Scanner allows identifying situations where an application becomes vulnerable due to issues in one of the libraries used as a dependency. Moreover, the vulnerable library may be used indirectly, i.e., invoked through another dependency. The project code […]
