FreeBSD Ports

security/osv-scanner 2.7.0_1

Vulnerability scanner written in Go which uses the OSV database

Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
d81b7ba3c3
License
APACHE20
Categories
security
Package size
14281.0 KiB, 51149.6 KiB installed

Description

Use OSV-Scanner to find existing vulnerabilities affecting your projects dependencies.

OSV-Scanner provides an officially supported frontend to the OSV database that connects a projects list of dependencies with the vulnerabilities that affect them. Since the OSV.dev database is open source and distributed, it has several benefits in comparison with closed source advisory databases and scanners:

* Each advisory comes from an open and authoritative source. * Anyone can suggest improvements to advisories, resulting in a very high quality database. * The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developers list of packages.

The above all results in fewer, more actionable vulnerability notifications, which reduces the time needed to resolve them.

Install

As a binary package — by origin, or by package name:

pkg install security/osv-scanner
pkg install osv-scanner

From the ports tree:

cd /usr/ports/security/osv-scanner/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	osv-scanner>0:security/osv-scanner

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2.4.0_52.6.0-2.2.1-
FreeBSD:14:quarterly2.4.0_52.4.0_5n/a1.9.2_3-
FreeBSD:15:latest2.6.02.7.0n/a-2.2.1
FreeBSD:15:quarterly2.4.0_52.4.0_5n/an/an/a
FreeBSD:16:latest2.4.0_42.7.0n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

All build dependencies 1
All run dependencies 1

No port depends on this one.

Configuration

Options name: security_osv-scanner

OptionDefaultDescription
DOCSoffBuild and/or install documentation
USES
go:modules,run
Service scripts
none

Files

distinfo 2
FileSizeSHA256
go/security_osv-scanner/osv-scanner-v2.7.0/v2.7.0.mod110813e5985b09095a2a836bbafd4a79e126010af066acaf6d32b5d098a12f989a6a6
go/security_osv-scanner/osv-scanner-v2.7.0/v2.7.0.zip1.6582627e+070b34fc4c107c027578746595ef22fc14c813ea30e63940dc223610601448f192

Commit history 9

DateCommitCreditsLog message
d81b7ba3c3 Dag-Erling Smørgrav various: Bump Go ports for Go 1.26.10 / 1.27.3
be4a589081 Gabriel M. Dutra security/osv-scanner: Update to 2.7.0
ChangeLog: https://github.com/google/osv-scanner/releases/tag/v2.7.0
0ce93af7d4 Gabriel M. Dutra security/osv-scanner: Update to 2.6.0
ChangeLog: https://github.com/google/osv-scanner/releases/tag/v2.6.0
031fc6bfbf Dag-Erling Smørgrav various: Bump Go ports
2c73fa4d6e Dag-Erling Smørgrav various: Drop Go 1.26+ version pin
This is a nop since 1.26 is the oldest supported version.

The latest 5 of 9 in the history this site was built from.