Hacker GitHub

← All repos

google/osv.dev

View on GitHub ↗ ★ 3,030 Go

Open source vulnerability DB and triage service.

10 mentions on Hacker News by 2 people: 1 story, 9 comments · first 2021-08-04 · latest 2026-10-19

Mentions per year 10 mentions · busiest year 2022 (4)
20082026
  1. …runs CloudFuzz/CloudFuzzLite for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources
  2. …runs CloudFuzz[Lite?] for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources From "Automated Unit Test Improvement using Large Language Models at Meta"…
  3. …random bits with uniform probability; and (3) why Argon2 instead of e.g. only two rounds of SHA256? https://github.com/google/osv.dev/blob/master/README.md#usin... : > We provide a Go based tool that will scan your dependencies, and check…
  4. …A number of tools integrate with OSV-schema data hosted by osv.dev: https://github.com/google/osv.dev#third-party-tools-and-inte... : > We provide a Go based tool that will scan your dependencies, and check them against the OS
  5. …; Ctrl-F "SBOM" [2] "Existing artifact vuln scanners, databases, and specs?" https://github.com/google/osv.dev/issues/55#issue-802542447 FWIW, from the OSV README https://github.com/google/osv.dev : > This is an ongoing project. We enc
    comment by westurner · 2022-08-10 · in Adding Auditing to Pip
  6. FWIW, here's how OSV affords search queries: https://github.com/google/osv#data-dumps > For convenience, these sources are aggregated and continuously exported to a GCS bucket maintained by OSV: gs://osv-vulnerabilities > This bucket…
  7. …runs CloudFuzz[Lite?] for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources
    comment by westurner · 2022-03-24 · in Implementing a toy version of TLS 1.3
  8. …[2] Linked Data metadata for all of the standardized-metadata-documented components in a stack. [1] https://github.com/google/osv/issues/55 [2] https://github.com/codemeta/codemeta
  9. ▲ 11
    OSV – Open-Source Vulnerabilities
    story by Dentrax · 2021-10-13 · 0 comments
  10. …upgrade their containerized applications.* "Existing artifact vuln scanners, databases, and specs?" https://github.com/google/osv/issues/55
    comment by westurner · 2021-08-04 · in NSA Kubernetes Hardening Guidance [pdf]