OSV-Scanner + AppGuard
Vulnerability scanner using Google's OSV database for comprehensive dependency coverage.
What is OSV-Scanner?
OSV-Scanner is a vulnerability scanner by Google that uses the OSV (Open Source Vulnerabilities) database. It matches your dependencies against vulnerabilities from NVD, GitHub Advisory, and other sources. OSV-Scanner supports all major package ecosystems and produces detailed output with CVE aliases and severity scores.
Google OSV database integrationMulti-ecosystem support (npm, pip, Go, Rust, etc.)CVE alias resolutionSBOM-based scanningLock file and manifest scanning
Integrate OSV-Scanner with AppGuard
1
Install OSV-Scanner
Install OSV-Scanner via Go.
go install github.com/google/osv-scanner/cmd/osv-scanner@latest
2
Run a scan
Run OSV-Scanner against your project.
osv-scanner --format json -o results.json ./
3
Push to AppGuard
Send the results to AppGuard.
curl -X POST "$APPGUARD_PUBLIC_URL/api/ingest" \ -H "X-Api-Token: $API_TOKEN" \ -F "[email protected]"
What AppGuard adds to OSV-Scanner
Unified SCA dashboard
See OSV findings alongside other SCA scanners in one view.
EPSS enrichment
Enrich OSV findings with EPSS exploit prediction scores.
Version comparison
Compare vulnerability counts between dependency versions.