google/osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Google's CLI connects your dependencies to the OSV vulnerability database — OSV-Scanner is Google's officially supported CLI frontend to OSV.dev, matching a project's dependencies against open vulnerability advisories. It now covers languages, OS packages, and container images, and adds guided remediation suggesting version upgrades based on severity and fix strategy. Useful for teams wanting open, comprehensive vuln data instead of closed advisory feeds.
Metrics
Retention can be computed 30 days after a repository first trends (it isn't shown until then). See About for how each metric is defined.
Star growth and Trending appearances (last 30 days)
Bands mark days on the trending list (darker = higher rank)
Daily trending ranks as a table (1 days)
| Date | Daily |
|---|---|
| Nov 7, 2026 | go #22 +24 |
Created Nov 14, 2022 · First on trending Nov 7, 2026
Other notable repositories in the same category (Security)
- finic-ai/kairos
- Gramli/Gramli.Framework
- nishant-Tiwari24/veil
- sherlock-project/sherlock
- chris124567/cfsolve
See all Security repositories →
Rank within security-tools
| # | Repository | ★ |
|---|---|---|
| 1 | KeygraphHQ/shannon | 51,658 |
| 2 | aquasecurity/trivy | 39,215 |
| 3 | vxcontrol/pentagi | 33,893 |
| 4 | gitleaks/gitleaks | 30,886 |
| 5 | trufflesecurity/trufflehog | 29,176 |
| 6 | NVIDIA/SkillSpector | 25,238 |
| 7 | qeeqbox/social-analyzer | 24,528 |
| 8 | smicallef/spiderfoot | 24,489 |
| 9 | BishopFox/sliver | 12,306 |
| 10 | google/osv-scanner | 11,489 |