From f93f1dc6517318cf0b97124c235ce065c7841b51 Mon Sep 17 00:00:00 2001 From: "Sergey \"Shnatsel\" Davidoff" Date: Sat, 5 Apr 2025 10:12:57 +0100 Subject: [PATCH] Clarify osv-scanner support in README --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index ab7c5b7..67d3bbb 100644 --- a/README.md +++ b/README.md @@ -49,7 +49,7 @@ If you're using a shell other than bash, or if using an alias is not an option, * [cargo audit](https://crates.io/crates/cargo-audit) v0.17.3+ can detect this data in binaries and report on vulnerabilities. See [here](https://github.com/rustsec/rustsec/tree/main/cargo-audit#cargo-audit-bin-subcommand) for details. * [trivy](https://github.com/aquasecurity/trivy) v0.31.0+ detects this data in binaries and reports on vulnerabilities. See the [v0.31.0 release notes](https://github.com/aquasecurity/trivy/discussions/2716) for an end-to-end example. -* [osv-scanner](https://github.com/google/osv-scanner/) v2.0 (**still upcoming** as of this writing) [will include support](https://github.com/google/osv-scalibr/pull/377) for reading this data. +* [osv-scanner](https://github.com/google/osv-scanner/) v2.0.1 [reads this data](https://github.com/google/osv-scalibr/pull/377) when scanning container images. #### Recovering the dependency list