osv-scanner
Scan various mediums for dependencies and matches them against the OSV database. tldr-pages
On several platforms
Several platforms
Scan a Docker image
osv-scanner -D docker_image_nameIdentifyScan a package lockfile
osv-scanner -L path/to/lockfileIdentifyScan an SBOM file
osv-scanner -S path/to/sbom_fileIdentifyScan multiple directories recursively
osv-scanner -r directory1 directory2 ...IdentifySkip scanning Git repositories
osv-scanner --skip-git -r targetIdentifyOutput result in JSON format
osv-scanner --json -D targetIdentify