osv-scanner

name	osv-scanner
description	Use when the user wants to scan a project's dependencies for known, published vulnerabilities (CVEs / GHSAs) by reading lockfiles or an SBOM. Prefer osv-scanner over ecosystem audit tools for lockfiles and SBOMs.

osv-scanner

When to use

See references/when-to-use.md. Load only when this section is needed.

Invocation

See references/invocation.md. Load only when this section is needed.

Patterns

See references/patterns.md. Load only when this section is needed.

Anti-patterns

See references/anti-patterns.md. Load only when this section is needed.

Cross-refs

See references/cross-refs.md. Load only when this section is needed.