google/osv.dev
View on GitHub ↗ ★ 3,030 Go
Open source vulnerability DB and triage service.
10 mentions on Hacker News by 2 people: 1 story, 9 comments · first 2021-08-04 · latest 2026-10-19
20082026
-
…runs CloudFuzz/CloudFuzzLite for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources
comment by westurner · 2026-10-19 · in Show HN: Gitwal – every open-source project mention on X, LinkedIn, Reddit, etc. -
…runs CloudFuzz[Lite?] for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources From "Automated Unit Test Improvement using Large Language Models at Meta"…
comment by westurner · 2024-07-05 · in The sad state of property-based testing libraries -
…random bits with uniform probability; and (3) why Argon2 instead of e.g. only two rounds of SHA256? https://github.com/google/osv.dev/blob/master/README.md#usin... : > We provide a Go based tool that will scan your dependencies, and check…
comment by westurner · 2024-02-16 · in Magika: AI powered fast and efficient file type identification -
…A number of tools integrate with OSV-schema data hosted by osv.dev: https://github.com/google/osv.dev#third-party-tools-and-inte... : > We provide a Go based tool that will scan your dependencies, and check them against the OS
comment by westurner · 2023-05-10 · in Tell HN: We should start to add “ai.txt” as we do for “robots.txt” -
…; Ctrl-F "SBOM" [2] "Existing artifact vuln scanners, databases, and specs?" https://github.com/google/osv.dev/issues/55#issue-802542447 FWIW, from the OSV README https://github.com/google/osv.dev : > This is an ongoing project. We enc
comment by westurner · 2022-08-10 · in Adding Auditing to Pip -
FWIW, here's how OSV affords search queries: https://github.com/google/osv#data-dumps > For convenience, these sources are aggregated and continuously exported to a GCS bucket maintained by OSV: gs://osv-vulnerabilities > This bucket…
comment by westurner · 2022-03-24 · in Google's Certificate Transparency Search page to be discontinued May 15th, 2022 -
…runs CloudFuzz[Lite?] for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources
comment by westurner · 2022-03-24 · in Implementing a toy version of TLS 1.3 -
…[2] Linked Data metadata for all of the standardized-metadata-documented components in a stack. [1] https://github.com/google/osv/issues/55 [2] https://github.com/codemeta/codemeta
comment by westurner · 2022-03-15 · in Podman can transfer container images without a registry -
…upgrade their containerized applications.* "Existing artifact vuln scanners, databases, and specs?" https://github.com/google/osv/issues/55
comment by westurner · 2021-08-04 · in NSA Kubernetes Hardening Guidance [pdf]