ANNOUNCING OSV-SCANNER V2: VULNERABILITY SCANNER AND REMEDIATION TOOL FOR OPEN SOURCE

Summary from the TLDR InfoSec newsletter

Google's OSV-Scanner V2.0.0 is an open-source vulnerability scanner that now integrates with OSV-SCALIBR. It offers improved dependency extraction, layer-aware container scanning for Debian, Ubuntu, and Alpine images, interactive HTML output, and guided remediation for Maven pom.xml files. Future plans for the project include enhanced integration with OSV-SCALIBR, increased ecosystem support, full filesystem accountability, reachability analysis, and VEX support.