Thursday, 11 June 2026 @ 16:01 UTC ~20 12,987 142,357

OSV Scanner

Google · Google.OSVScanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

winget install --id Google.OSVScanner --exact --source winget

Latest 2.3.8

Release Notes

Fixes:

  • Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and opencontainers/runtime-spec). (#2782)
  • Bug #2762 Skip packages with short commit hashes instead of aborting scan.
  • Bug #2781 Secure file path handling with os.OpenRoot.
  • Bug #2766 Correct typos across docs, configs, and Go source. Misc:
  • Update osv-scalibr to v0.4.6-0.20260504042738-9293bfa4f86f.

Installer type: portable

Architecture Scope Download SHA256
x64 — Download CB04E79DD9698A7BC821BBFDDDEC916A416D1409FDA79C927C509D37D00C9716
arm64 — Download 285D1FBCF2C69AB5EE38AE3A850AB46E83F32EF1CD5F3C4C9EB161CC493F6D52

Details

Homepage
https://github.com/google/osv-scanner
License
Apache-2.0
Publisher
Google
Support
https://github.com/google/osv-scanner/issues

Tags

scannersecurity-auditsecurity-toolsvulnerability-scanner

Older versions (16)

2.3.6
Architecture Scope Download SHA256
x64 — Download 14856196D681E18238B41D4741BBE0558BEF157C4B3B49D618528294AFEBE19F
arm64 — Download 5EDD366CE55B696DBE74237987D8947808C400721B0CC4852F8224FBFD9F3C17
2.3.5
Architecture Scope Download SHA256
x64 — Download B165D33C08BDA663119A459F5187E096D2525F888503495F5F34925741E981A2
arm64 — Download A3D2FFA712FD2376E88A02C98B917A87885C761D0D21980B8F5EABFB910CBCB8
2.3.3
Architecture Scope Download SHA256
x64 — Download 8A41DCB9377937E78299FBB22F494F69019002B79A0C18D174DE621B0638AE46
arm64 — Download 3C29B84B496D10A2932724A540E4594B35750840D20BF416EDCAF32A6CDDF326
2.3.2
Architecture Scope Download SHA256
x64 — Download 4AFB4469887369997DA66CDFC9A37437BBB1F027B04C738F88D71A988B9158AD
arm64 — Download 4A143DDDFED2FE8F4CA710945B04D21521F1D245CCF39406AE05E6B67BA0ECF5
2.3.1
Architecture Scope Download SHA256
x64 — Download 6A35A530BE003AE078FBB0E92DF0B92889B5A54658E49CF0E03BEBE13EAC255C
arm64 — Download 4E166EDA17252D9ED3472D3CAF5EAFA328E4A162A1D062831C14D0B559CAFA22
2.3.0
Architecture Scope Download SHA256
x64 — Download 479B1B8D43DD490AADB9FBB6648AF53AD3AEDCB29104A89F597514CBCD61F229
arm64 — Download 2D30EE7F322CD7E9BB410F2B0B1F655C7A5A4700E351DC94FA6E2F3DD4BE6268
2.2.4
Architecture Scope Download SHA256
x64 — Download 423E310B9E5A7F896A6C3640F7BF9A482B56E677E2C593382C7837D99358275E
arm64 — Download E72DAC85072C3A06E3AE0AC12586DB62EB2C998E9E4F1C467FC49A5E997B6509
2.2.3
Architecture Scope Download SHA256
x64 — Download 7B45CB0A39A83B870C8FC7A6BB25F9529F3877DD0A9C0F0D72510DEA376ACA94
arm64 — Download 9F6E386A5734D940D46D56E275E7EE2F3939BB19AFAEA5394B828D31AB88FCB8
2.2.2
Architecture Scope Download SHA256
x64 — Download 5CCE6A9B96B88D0620BFDB22DA72497C444948E56C64D3508F054CDED13FB49F
arm64 — Download BB4D4A291CC9A2E0EE30CD2ACF53CCAE1C1D6CE1FE2E470AB0B88FB485D0FF2D
2.2.1
Architecture Scope Download SHA256
x64 — Download 83BDC53DDEE301B9208C355B473B9A8C8A2E8A94EC845BED0D3E1835F67B0CA4
arm64 — Download 8CE88C8E6A3BBC05ACA5252E71C256CA495F47C2C1EA17CDD969CD580C95A095
2.2.0
Architecture Scope Download SHA256
x64 — Download 30CB10D2FF31D7286FE41DFC0C88CD4EC99FCB8CEC2F03A2295A03728DD5B917
arm64 — Download E3ED8F1FDB73BBD0FA7B8F8A43FE5FB0D35ECDE52A6A4380D02ADF1039ECD703
2.1.0
Architecture Scope Download SHA256
x64 — Download 5D10CA12365B24200C6E6000D86D6D7C74244D46BF89B855F763BD5BAC8373A1
arm64 — Download 89DE70925791444290816940BFDDCBA673E7875383FB5EF647C4D367F582878D
2.0.3
Architecture Scope Download SHA256
x64 — Download B37EC1B56F2620C2BA84BF165F4186495041BAF73CAA5FE2A6D16EAFFF74CCEA
arm64 — Download 9920EED2BA989407459CD03E50D639207047373A68574AE2B08BA3967DB1C237
2.0.2
Architecture Scope Download SHA256
x64 — Download F9765A35B5776494FDE22ADFEF9A17F9D4BD71EE5F61E6756A5E0BB3C695CE27
arm64 — Download 266F6A09BBEC8DB0941CBD563BCD9A7CC832D1EAFA72B8471961CA35871AB6F0
2.0.1
Architecture Scope Download SHA256
x64 — Download 9094D0EE105820CFA3C0EE45AB6506A456B4415D013E8D7475F23F7CF28B50F0
arm64 — Download 920FFDC33D9D59222D423B245BD7077C50C916B4CE8D4E92483F1C2681E23565
1.9.2
Architecture Scope Download SHA256
x64 — Download C041E84D6B58150A31E8CF49FB3EB9B1E87B305C77DB6AA82959262E2B1E9C9D
arm64 — Download C8936D46115EA09877185643ADB5FAA406C8CB9A652B55BEB7211E8943517E2A