Google launches a tool that looks for vulnerabilities in open source software

Google launches a tool that looks for vulnerabilities in open source software


OSV Scanner is for finding security holes in open source project dependencies, reducing the possibility of legacy issues

OR Google released a tool this week that aims to help software developers find security vulnerabilities in open source dependencies. The OSV scanner is free and helps you identify which elements need to be updated, as well as which ones need attention due to weaknesses in your programming.




Google launches a tool that looks for vulnerabilities in open source software

16 programming ecosystems are compatible with the program, which works on projects based on Linux, Android, Delbian, PyPI, Alpine and many more. The OSC scanner comes from the company’s tool, also called OSV, which has served as an open source vulnerability database since February last year, with more than 23,000 entries logged in 2022 alone.

The tool launched now basically compares the projects under development with the information available on the platform, notifying the managers of the problems and points of attention. Transitive dependencies are also explored, with Google pointing to it as a way to reduce the complexity of tracking like this, especially in huge jobs using different elements.

The work continues, with Google stating that after launch it has feature enhancement and adding new features as a goal. In the future, OSV Scanner should gain better compatibility with C or C++ projects, as well as a feature that allows you to run scheduled checks, so project managers don’t have to go through the process manually.

The tool can be downloaded for free from Git Hub or on the official website of the initiative THE V🇧🇷 As mentioned, the Scanner is free and has no usage restrictions, and can be used by companies to ordinary users.

Trending on Canaltech:

🇧🇷The best content in your email for free. Choose your favorite Terra newsletter. Click here!

Source: Terra

You may also like