OSV-SCALIBR

Summary from the TLDR InfoSec newsletter

SCALIBR (Software Composition Analysis Library) is an extensible file system scanner used to extract software inventory data (e.g. installed language packages) and detect vulnerabilities. It is a versatile file system scanner that detects vulnerabilities and extracts software inventory data. OSV-SCALIBR combines SCALIBR with OSV-scanner for software inventory extraction and vulnerability scanning. It can be used as a standalone tool, as a library for custom scans, or to analyze container images.