https://www.hascode.com/tags/container-scan/ Recent content in Container-Scan on Micha Kops' Tech Notes Hugo -- 0.147.8 en Copyright © 2010 - 2025 Micha Kops. #213243b1d6e8932079e09227d3f3ed0c806cd0c9 Fri, 28 Mar 2025 00:00:00 +0100 https://www.hascode.com/cve-scanning-and-guided-remediation-with-osv-scanner/ Fri, 28 Mar 2025 00:00:00 +0100 https://www.hascode.com/cve-scanning-and-guided-remediation-with-osv-scanner/ <div id="preamble"> <div class="sectionbody"> <div class="imageblock"> <div class="content"> <img src="osv-scanner-cover.webp" alt="osv scanner cover"/> </div> <div class="title">Figure 1. OSV Scanner</div> </div> <div class="paragraph"> <p>Security is a critical aspect of software development, and staying ahead of vulnerabilities is essential for us application developers. Google’s OSV Scanner is a powerful tool that helps detect vulnerabilities in open-source dependencies.</p> </div> <div class="paragraph"> <p>This article will guide us through setting up and using OSV Scanner to secure our projects, scan for invalid licenses, scan OCI images and finally how to fix findings via guided remediation.</p> </div>