Repository navigation

Vulnerability Scanning

Jump to bottom Edit New page

Mambo edited this page Jul 15, 2026 · 12 revisions

CVE(Common Vulnerabilities and Exposures), CVSS(Common Vulnerability Scoring System), OSVF(Open Source Vulnerability format)...

Scan dependencies for vulnerability

OWASP Dependency-Check
OSV Scanner uses the data provided by OSV database.

Scan container image for vulnerability

Amazon ECR Basic Scanning uses the open-source Clair project.
Trivy as GitHub action

Vulnerability Database

NIST NVD(National Vulnerability Database)
Google osv.dev
GitHub Advisory Database