Skip to content

Releases: google/osv-scalibr

v0.1.3

20 Sep 12:35
Compare
Choose a tag to compare
  • Support -r options and more version ranges in the requirements.txt parser
  • Accuracy improvements in NPM extraction
  • Support scanning remote images natively in SCALIBR
  • Detect transitional dpkg packages to filter out false positive vuln sources
  • Add dedicated detectors for various CVEs
  • CycloneDX SBOM extraction support
  • Import various extractors from OSV: javascript/pnpm, php/composerlock, python/pipfilelock, python/pdmlock, python/poetrylock

v0.1.2

30 Jul 13:11
Compare
Choose a tag to compare
  • Add new extractors: containerd, dism patches, snap packages, flatpak packages
  • Support for Mac compilation
  • Support file size limits on some extractors

v0.1.1

07 Jun 15:04
Compare
Choose a tag to compare
  • Support for installing the CLI tool with "go install"
  • Support one-shot Extractors
  • Cross-compilation support for Windows and Windows-specific extraction logic
  • Make the weak credentials Detector available

v0.1.0

08 May 14:23
Compare
Choose a tag to compare

Initial release.