notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2024Q2
osv-scanner Vulnerability scanner written in Go which uses the OSV database
1.7.1_3 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.7.1_3Version of this port present on the latest quarterly branch.
Maintainer: lcook@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2024-04-15 08:39:30
Last Update: 2024-06-15 09:57:50
Commit Hash: aa2919f
License: APACHE20
WWW:
https://github.com/google/osv-scanner
Description:
Use OSV-Scanner to find existing vulnerabilities affecting your projects dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a projects list of dependencies with the vulnerabilities that affect them. Since the OSV.dev database is open source and distributed, it has several benefits in comparison with closed source advisory databases and scanners: * Each advisory comes from an open and authoritative source. * Anyone can suggest improvements to advisories, resulting in a very high quality database. * The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developers list of packages. The above all results in fewer, more actionable vulnerability notifications, which reduces the time needed to resolve them.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/osv-scanner
  2. /usr/local/share/licenses/osv-scanner-1.7.1_3/catalog.mk
  3. /usr/local/share/licenses/osv-scanner-1.7.1_3/LICENSE
  4. /usr/local/share/licenses/osv-scanner-1.7.1_3/APACHE20
Collapse this list.
Dependency lines:
  • osv-scanner>0:security/osv-scanner
To install the port:
cd /usr/ports/security/osv-scanner/ && make install clean
To add the package, run one of these commands:
  • pkg install security/osv-scanner
  • pkg install osv-scanner
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: osv-scanner
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1712438042 SHA256 (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.mod) = df7aa5bea0f40ac2e6bc31e19db8246217bd168f106e0e559f30f51e7331a27a SIZE (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.mod) = 5059

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.zip) = c621713f2bb76a5cca3235bb2266ce7d6377f2c9bf7569bf551fa2e69987b443 SIZE (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.zip) = 3958644

Collapse this list.


No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go121 : lang/go121
Fetch dependencies:
  1. go121 : lang/go121
  2. ca_root_nss>0 : security/ca_root_nss
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for osv-scanner-1.7.1_3: DOCS=on: Build and/or install documentation ===> Use 'make config' to modify these settings
Options name:
security_osv-scanner
USES:
go:1.21,modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/google/osv-scanner/@v/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.7.1_3
15 Jun 2024 09:57:50
commit hash: aa2919fafeb561c987ff7957a14f3bdbd4b62399commit hash: aa2919fafeb561c987ff7957a14f3bdbd4b62399commit hash: aa2919fafeb561c987ff7957a14f3bdbd4b62399commit hash: aa2919fafeb561c987ff7957a14f3bdbd4b62399 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
(cherry picked from commit 746fa696a12ef1ca798e36baf087f579375b8cd1)
1.7.1_2
13 May 2024 18:28:41
commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
(cherry picked from commit fce0cc32720e61042bc675152b116f9e61532e92)
1.7.1_1
15 Apr 2024 08:31:41
commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
(cherry picked from commit 32b284679a1954ef1e0c0d52c4741d00e36dc6e0)

Number of commits found: 3