USING OPEN-SOURCE SOFTWARE COMPOSITION ANALYSIS TOOL FROM GOOGLE

Summary from the TLDR InfoSec newsletter

This article dives into how you can set up and configure osv-scanner, an open source SCA tool, to identify vulnerabilities in popular open source projects.