FreshPorts -- security/osv-scanner: Vulnerability scanner written in Go which uses the OSV database

Port details on branch 2025Q4

osv-scanner Vulnerability scanner written in Go which uses the OSV database

2.2.2_1 security =0 2.2.2_1Version of this port present on the latest quarterly branch.

Maintainer: dutra@FreeBSD.org

Port Added: 2025-11-01 15:53:31

Last Update: 2025-11-01 15:48:35

Commit Hash: ae07b4c

License: APACHE20

WWW:

https://github.com/google/osv-scanner

Description:

Use OSV-Scanner to find existing vulnerabilities affecting your projects dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a projects list of dependencies with the vulnerabilities that affect them. Since the OSV.dev database is open source and distributed, it has several benefits in comparison with closed source advisory databases and scanners: * Each advisory comes from an open and authoritative source. * Anyone can suggest improvements to advisories, resulting in a very high quality database. * The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developers list of packages. The above all results in fewer, more actionable vulnerability notifications, which reduces the time needed to resolve them.

¦ ¦ ¦ ¦

Manual pages:

FreshPorts has no man page information for this port.

pkg-plist: as obtained via: make generate-plist

Expand this list (4 items)

Collapse this list.

bin/osv-scanner
/usr/local/share/licenses/osv-scanner-2.2.2_1/catalog.mk
/usr/local/share/licenses/osv-scanner-2.2.2_1/LICENSE
/usr/local/share/licenses/osv-scanner-2.2.2_1/APACHE20

Collapse this list.

USE_RC_SUBR (Service Scripts)

no SUBR information found for this port

Dependency lines:

osv-scanner>0:security/osv-scanner

To install the port:

cd /usr/ports/security/osv-scanner/ && make install clean

To add the package, run one of these commands:

pkg install security/osv-scanner
pkg install osv-scanner

NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.

PKGNAME: osv-scanner

Flavors: there is no flavor information for this port.

distinfo:

TIMESTAMP = 1757786339 SHA256 (go/security_osv-scanner/osv-scanner-v2.2.2/v2.2.2.mod) = d54389929750cc4839c89a8f2083a8d735c105d2aac0a3d90cdfb9a5e8fc998f SIZE (go/security_osv-scanner/osv-scanner-v2.2.2/v2.2.2.mod) = 9801

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_osv-scanner/osv-scanner-v2.2.2/v2.2.2.zip) = 5dbba62ae3d7fec8f1d61d3cb011b54f8b994ac6b7aa9a33a3f9bee0abf0a70a SIZE (go/security_osv-scanner/osv-scanner-v2.2.2/v2.2.2.zip) = 12527375

Collapse this list.

Packages (timestamps in pop-ups are UTC):

osv-scanner
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	2.2.4	2.3.0	-	2.2.2	-	n/a	n/a	n/a
FreeBSD:13:quarterly	2.2.2	2.2.2_1	-	1.9.2_3	2.2.2_1	n/a	n/a	n/a
FreeBSD:14:latest	2.2.4	2.3.0	-	2.2.1	-	-	-	-
FreeBSD:14:quarterly	2.2.2_1	2.2.2_1	-	1.9.2_3	2.2.2_1	-	-	-
FreeBSD:15:latest	2.2.4_1	2.3.0	n/a	-	n/a	n/a	-	-
FreeBSD:15:quarterly	2.2.2_1	2.2.2_1	n/a	-	n/a	n/a	-	-
FreeBSD:16:latest	2.2.4_1	2.3.0	n/a	-	n/a	n/a	-	-

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

go124 : lang/go124

Runtime dependencies:

go124 : lang/go124

Fetch dependencies:

go124 : lang/go124

There are no ports dependent upon this port

Configuration Options:

===> The following configuration options are available for osv-scanner-2.2.2_1: DOCS=on: Build and/or install documentation ===> Use 'make config' to modify these settings

Options name:

security_osv-scanner

USES:

go:1.24,modules,run zip

FreshPorts was unable to extract/find any pkg message

Master Sites:

Expand this list (1 items)

Collapse this list.

https://proxy.golang.org/github.com/google/osv-scanner/v2/@v/

Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)

Commit

Credits

Log message

2.2.2_1
01 Nov 2025 15:48:35

Adam Weinberger (adamw)

various: Bump Go ports for 1.24.9

This is a direct commit to 2025Q4. It'll definitely bring things (esp.
PORTREVISION lines) out of sync with main, but trying to MFH the
associated bump commit would bring in a massive quantity of conflicts.

Number of commits found: 1

Login
User Login Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts? About the authors Issues FAQ How big is it? Security Policy Privacy Blog Contact

Search
Enter Keywords: more...

Latest Vulnerabilities

png	Dec 05
apache24	Dec 04
libvirt	Dec 04
go124	Dec 03
go125	Dec 03
mongodb70	Dec 01
mongodb70	Dec 01
mongodb70	Dec 01
mongodb80	Dec 01
mongodb80	Dec 01
mongodb80	Dec 01
wolfssl	Nov 30
mongodb70	Nov 29
mongodb80	Nov 29
gitlab	Nov 27

13 vulnerabilities affecting 110 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last processed:
2025-12-05 06:19:39 UTC

Ports
Home Categories Deleted ports Sanity Test Failures Newsfeeds

Statistics

Graphs
NEW Graphs (Javascript)

Calculated hourly:

Port count	33978
Broken	118
Deprecated	251
Ignore	234
Forbidden	0
Restricted	2
No CDROM	1
Vulnerable	37
Expired	8
Set to expire	193
Interactive	0
new 24 hours	3
new 48 hours	3
new 7 days	41
new fortnight	56
new month	132