Google launches a tool that looks for vulnerabilities in open source software

OSV Scanner is for finding security holes in open source project dependencies, reducing the possibility of legacy issues

OR Google released a tool this week that aims to help software developers find security vulnerabilities in open source dependencies. The OSV scanner is free and helps you identify which elements need to be updated, as well as which ones need attention due to weaknesses in your programming.

• Linux and open source software could be the future of digital security
• Open source manipulation allows for attacks on big tech companies

16 programming ecosystems are compatible with the program, which works on projects based on Linux, Android, Delbian, PyPI, Alpine and many more. The OSC scanner comes from the company’s tool, also called OSV, which has served as an open source vulnerability database since February last year, with more than 23,000 entries logged in 2022 alone.

The tool launched now basically compares the projects under development with the information available on the platform, notifying the managers of the problems and points of attention. Transitive dependencies are also explored, with Google pointing to it as a way to reduce the complexity of tracking like this, especially in huge jobs using different elements.

The work continues, with Google stating that after launch it has feature enhancement and adding new features as a goal. In the future, OSV Scanner should gain better compatibility with C or C++ projects, as well as a feature that allows you to run scheduled checks, so project managers don’t have to go through the process manually.

The tool can be downloaded for free from Git Hub or on the official website of the initiative THE V🇧🇷 As mentioned, the Scanner is free and has no usage restrictions, and can be used by companies to ordinary users.

Trending on Canaltech:

• Method discovered that can cure depression in just 2 hours
• Instagram launches notes in DMs, improvements in “Your Turn” and collaborative collections
• Bill could end driving schools in Brazil; comprehend
• The government seizes 49 tons of contaminated raisins that would go into the panettone
• The new attack uses electromagnetic radiation to steal data from isolated machines
• GameSir G7 Review | Xbox controller better than the original?

🇧🇷The best content in your email for free. Choose your favorite Terra newsletter. Click here!

Source: Terra

Camila

Camila Luna is a writer at Gossipify, where she covers the latest movies and television series. With a passion for all things entertainment, Camila brings her unique perspective to her writing and offers readers an inside look at the industry. Camila is a graduate from the University of California, Los Angeles (UCLA) with a degree in English and is also a avid movie watcher.