snippetbashTip

osv-scanner — Scan various mediums for dependencies and matches them against the OSV database. More information: <

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

osv-scannercommandvariousdependenciescliscanformediums

Problem

How to use the osv-scanner command: Scan various mediums for dependencies and matches them against the OSV database. More information: <https://google.github.io/osv-scanner/usage/>.

Solution

osv-scanner — Scan various mediums for dependencies and matches them against the OSV database. More information: <https://google.github.io/osv-scanner/usage/>.

Scan a Docker image:

osv-scanner -D {{docker_image_name}}

Scan a package lockfile:

osv-scanner -L {{path/to/lockfile}}

Scan an SBOM file:

osv-scanner -S {{path/to/sbom_file}}

Scan multiple directories recursively:

osv-scanner -r {{directory1 directory2 ...}}

Skip scanning Git repositories:

osv-scanner --skip-git {{-r|-D}} {{target}}

Output result in JSON format:

osv-scanner --json {{-D|-L|-S|-r}} {{target}}

Code Snippets

Scan a Docker image

osv-scanner -D {{docker_image_name}}

Scan a package lockfile

osv-scanner -L {{path/to/lockfile}}

Scan an SBOM file

osv-scanner -S {{path/to/sbom_file}}

Scan multiple directories recursively

osv-scanner -r {{directory1 directory2 ...}}

Skip scanning Git repositories

osv-scanner --skip-git {{-r|-D}} {{target}}

Context

tldr-pages: common/osv-scanner

Revisions (0)

No revisions yet.