NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules · #316 by repository stars
Last release 2 years ago
no release in 18 months
Ships on a steady schedule
a new release about every 2 weeks
Most releases are documented
notes for 30 of 37 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
209 releases · first in 2022
One column per quarter.
Nothing published for this version
Bug #1377 Warn if a vulnerability is ignored multiple times in the same config.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Feature #1342 Add --experimental-offline-vulnerabilities and --experimental-no-resolve flags.
--experimental-offline-vulnerabilities and --experimental-no-resolve flags.vulnerabilities.ignore in package overrides.docker exits with a non-zero code when trying to scan imagesconfigdepsdevgrouperspdxOSV-Scanner v2 is coming soon! The next release will start with version v2.0.0-alpha1.
Here's a peek at some of the exciting upcoming features:
osv-scalibr library for better extraction capabilities.Importantly, the CLI interface of osv-scanner will be maintained with minimal breaking changes. Most breaking changes will only be in the API. More details in the upcoming alpha release.
This is the final feature v1 release of osv-scanner, future releases for v1 will only contain bug fixes.
--experimental-offline-vulnerabilities and --experimental-no-resolve flags.vulnerabilities.ignore in package overrides.docker exits with a non-zero code when trying to scan imagesconfigdepsdevgrouperspdxNothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Feature #1243 Allow explicitly ignoring the license of a package in config with license.ignore = true.
license.ignore = true..txt files with "requirements" in their name are requirements.txt files(no reason given) when there is no reason in the override config.LoadPath to be set via config file.stdlib.Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Feature #1160 Support fetching snapshot versions from a Maven registry.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Feature #1177 Adds --upgrade-config flag for configuring allowed upgrades on a per-package basis. Also hide & deprecate previous --disallow-major-upgr…
--upgrade-config flag for configuring allowed upgrades on a per-package basis. Also hide & deprecate previous --disallow-major-upgrades and --disallow-package-upgrades flags.Feature #1091 Improved the runtime of DiffVulnerabilityResults. Thanks @neilnaveen!
semantic is passed a valid models.Ecosystem.Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Bug #769 Fixed missing vulnerabilities for debian purls for --experimental-local-db.
--experimental-local-db.package exists in affected property.Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →