Giter Site home page Giter Site logo

westonsteimel / osv.dev Goto Github PK

View Code? Open in Web Editor NEW

This project forked from google/osv.dev

0.0 1.0 0.0 17.28 MB

Open source vulnerability DB and triage service.

Home Page: https://osv.dev

License: Apache License 2.0

Dockerfile 2.08% Shell 4.76% Python 54.96% Go 27.69% HTML 4.47% JavaScript 0.68% SCSS 2.76% Makefile 0.21% HCL 2.40%

osv.dev's Introduction

OpenSSF Scorecard

Documentation

Comprehensive documentation is available here. API documentation is available here.

Viewing the web UI

An instance of OSV's web UI is deployed at https://osv.dev.

Using the scanner

We provide a Go based tool that will scan your dependencies, and check them against the OSV database for known vulnerabilities via the OSV API.

Currently it is able to scan various lockfiles, debian docker containers, SPDX and CycloneDB SBOMs, and git repositories.

The scanner is located in its own repository.

This repository

This repository contains all the code for running https://osv.dev on GCP. This consists of:

  • API server (gcp/api)
  • Web interface (gcp/appengine)
  • Workers for bisection and impact analysis (docker/worker)

You'll need to check out submodules as well for many local building steps to work:

git submodule update --init --recursive

Contributing

Contributions are welcome!

Learn more about code, data, and documentation contributions. We also have a mailing list.

Do you have a question or a suggestion? Please open an issue.

Third party tools and integrations

There are also community tools that use OSV. Note that these are community built tools and unsupported by the core OSV maintainers.

Feel free to send a PR to add your project here.

osv.dev's People

Contributors

oliverchang avatar andrewpollock avatar another-rex avatar renovate-bot avatar michaelkedar avatar dependabot[bot] avatar hayleycd avatar rzhw avatar westonsteimel avatar inferno-chromium avatar di avatar azeemshaikh38 avatar g-rath avatar orchestr7 avatar lumjjb avatar calebbrown avatar frasertweedale avatar baekhyunwook avatar dukecat0 avatar annoraaq avatar joshbuker avatar hirotasoshu avatar susperius avatar dor1s avatar rjerrems avatar sbassett29 avatar sethmlarson avatar tylfin avatar olivekl avatar sarnesjo avatar

Watchers

James Cloos avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.