notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
osv-scanner Vulnerability scanner written in Go which uses the OSV database
1.7.1_1 security on this many watch lists=1 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.7.1_1Version of this port present on the latest quarterly branch.
Maintainer: lcook@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2022-12-19 05:09:09
Last Update: 2024-04-15 08:20:04
Commit Hash: 32b2846
People watching this port, also watch:: openradius, cytoscape, ruby32-gems, python311
License: APACHE20
WWW:
https://github.com/google/osv-scanner
Description:
Use OSV-Scanner to find existing vulnerabilities affecting your projects dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a projects list of dependencies with the vulnerabilities that affect them. Since the OSV.dev database is open source and distributed, it has several benefits in comparison with closed source advisory databases and scanners: * Each advisory comes from an open and authoritative source. * Anyone can suggest improvements to advisories, resulting in a very high quality database. * The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developers list of packages. The above all results in fewer, more actionable vulnerability notifications, which reduces the time needed to resolve them.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/osv-scanner
  2. /usr/local/share/licenses/osv-scanner-1.7.1_1/catalog.mk
  3. /usr/local/share/licenses/osv-scanner-1.7.1_1/LICENSE
  4. /usr/local/share/licenses/osv-scanner-1.7.1_1/APACHE20
Collapse this list.
Dependency lines:
  • osv-scanner>0:security/osv-scanner
To install the port:
cd /usr/ports/security/osv-scanner/ && make install clean
To add the package, run one of these commands:
  • pkg install security/osv-scanner
  • pkg install osv-scanner
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: osv-scanner
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1712438042 SHA256 (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.mod) = df7aa5bea0f40ac2e6bc31e19db8246217bd168f106e0e559f30f51e7331a27a SIZE (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.mod) = 5059

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.zip) = c621713f2bb76a5cca3235bb2266ce7d6377f2c9bf7569bf551fa2e69987b443 SIZE (go/security_osv-scanner/osv-scanner-v1.7.1/v1.7.1.zip) = 3958644

Collapse this list.


Packages (timestamps in pop-ups are UTC):
osv-scanner
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.7.11.7.1-1.7.11.7.1---
FreeBSD:13:quarterly1.4.3_21.4.3_2-1.4.3_21.7.1_1---
FreeBSD:14:latest1.6.1_21.7.1-1.6.1_21.7.1---
FreeBSD:14:quarterly1.4.3_21.7.1_1-1.4.3_21.7.1_1---
FreeBSD:15:latest1.6.1_21.7.1n/a1.6.1_1n/a---
FreeBSD:15:quarterly--n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go121 : lang/go121
Fetch dependencies:
  1. go121 : lang/go121
  2. ca_root_nss>0 : security/ca_root_nss
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for osv-scanner-1.7.1_1: DOCS=on: Build and/or install documentation ===> Use 'make config' to modify these settings
Options name:
security_osv-scanner
USES:
go:1.21,modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/google/osv-scanner/@v/
Collapse this list.

Number of commits found: 25

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.7.1_1
15 Apr 2024 08:20:04
commit hash: 32b284679a1954ef1e0c0d52c4741d00e36dc6e0commit hash: 32b284679a1954ef1e0c0d52c4741d00e36dc6e0commit hash: 32b284679a1954ef1e0c0d52c4741d00e36dc6e0commit hash: 32b284679a1954ef1e0c0d52c4741d00e36dc6e0 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
1.7.1
06 Apr 2024 22:29:36
commit hash: ce936c748cd8f96323e059f67d40403d86ff91d6commit hash: ce936c748cd8f96323e059f67d40403d86ff91d6commit hash: ce936c748cd8f96323e059f67d40403d86ff91d6commit hash: ce936c748cd8f96323e059f67d40403d86ff91d6 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.7.1

Changes:	https://github.com/google/osv-scanner/compare/v1.6.1...v1.7.1
1.6.1_2
06 Mar 2024 22:00:31
commit hash: ab359b34c97c7d1240079914bcd4dd54eb155e19commit hash: ab359b34c97c7d1240079914bcd4dd54eb155e19commit hash: ab359b34c97c7d1240079914bcd4dd54eb155e19commit hash: ab359b34c97c7d1240079914bcd4dd54eb155e19 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q1
1.6.1_1
11 Feb 2024 10:39:17
commit hash: 7e5aa2085f48d71be003c8ff0377bde837467291commit hash: 7e5aa2085f48d71be003c8ff0377bde837467291commit hash: 7e5aa2085f48d71be003c8ff0377bde837467291commit hash: 7e5aa2085f48d71be003c8ff0377bde837467291 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump PORTREVISION after lang/go* update

PR:		276530
1.6.1
21 Jan 2024 01:20:17
commit hash: be9a82e88065cdc5bc9460466882f13e00a5ec5ecommit hash: be9a82e88065cdc5bc9460466882f13e00a5ec5ecommit hash: be9a82e88065cdc5bc9460466882f13e00a5ec5ecommit hash: be9a82e88065cdc5bc9460466882f13e00a5ec5e files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.6.1

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.6.1
1.4.3_1
07 Dec 2023 02:22:10
commit hash: 0505b712df3ae2b4bcaba00aecc7c1e9100d8609commit hash: 0505b712df3ae2b4bcaba00aecc7c1e9100d8609commit hash: 0505b712df3ae2b4bcaba00aecc7c1e9100d8609commit hash: 0505b712df3ae2b4bcaba00aecc7c1e9100d8609 files touched by this commit
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump PORTREVISION after lang/go* update

PR:		274405
1.4.3
15 Nov 2023 20:48:15
commit hash: 4f97782a19d0f841dda79023399d4a9f824ba838commit hash: 4f97782a19d0f841dda79023399d4a9f824ba838commit hash: 4f97782a19d0f841dda79023399d4a9f824ba838commit hash: 4f97782a19d0f841dda79023399d4a9f824ba838 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.4.3

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.4.3
1.4.1
18 Oct 2023 22:00:16
commit hash: a894b70bea98725c63d9254e357524b946c6ceadcommit hash: a894b70bea98725c63d9254e357524b946c6ceadcommit hash: a894b70bea98725c63d9254e357524b946c6ceadcommit hash: a894b70bea98725c63d9254e357524b946c6cead files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.4.1

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.4.1
1.4.0
17 Sep 2023 13:40:54
commit hash: b3e71478064028f3092ceb78faebd8914d23a38dcommit hash: b3e71478064028f3092ceb78faebd8914d23a38dcommit hash: b3e71478064028f3092ceb78faebd8914d23a38dcommit hash: b3e71478064028f3092ceb78faebd8914d23a38d files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.4.0

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.4.0
1.3.6_1
08 Sep 2023 14:34:56
commit hash: 8e4bc57934f0611f59a2bfca1ddbab781572ead3commit hash: 8e4bc57934f0611f59a2bfca1ddbab781572ead3commit hash: 8e4bc57934f0611f59a2bfca1ddbab781572ead3commit hash: 8e4bc57934f0611f59a2bfca1ddbab781572ead3 files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after lang/go* update
1.3.6
19 Aug 2023 18:51:32
commit hash: f0a00bf4501c7e6029ce05c800014d9b99de82b8commit hash: f0a00bf4501c7e6029ce05c800014d9b99de82b8commit hash: f0a00bf4501c7e6029ce05c800014d9b99de82b8commit hash: f0a00bf4501c7e6029ce05c800014d9b99de82b8 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.3.6

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.3.6
1.3.4_1
04 Aug 2023 14:24:50
commit hash: 09b993031a3b38ba8c33639ca40c1e3d69de67fccommit hash: 09b993031a3b38ba8c33639ca40c1e3d69de67fccommit hash: 09b993031a3b38ba8c33639ca40c1e3d69de67fccommit hash: 09b993031a3b38ba8c33639ca40c1e3d69de67fc files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after lang/go{119,120} update
1.3.4
08 Jun 2023 15:34:25
commit hash: 19026d1ca4a6ba7fe1f489cc05f94907dec8a20acommit hash: 19026d1ca4a6ba7fe1f489cc05f94907dec8a20acommit hash: 19026d1ca4a6ba7fe1f489cc05f94907dec8a20acommit hash: 19026d1ca4a6ba7fe1f489cc05f94907dec8a20a files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.3.4

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.3.4
1.3.3
22 May 2023 02:28:38
commit hash: c450c33babf7e593a4a66bdaf29af5f3d8da8b6dcommit hash: c450c33babf7e593a4a66bdaf29af5f3d8da8b6dcommit hash: c450c33babf7e593a4a66bdaf29af5f3d8da8b6dcommit hash: c450c33babf7e593a4a66bdaf29af5f3d8da8b6d files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.3.3

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.3.3
1.3.2
04 May 2023 11:38:43
commit hash: dbc105b65c81fe4cdc60abb9a06792a32a074d21commit hash: dbc105b65c81fe4cdc60abb9a06792a32a074d21commit hash: dbc105b65c81fe4cdc60abb9a06792a32a074d21commit hash: dbc105b65c81fe4cdc60abb9a06792a32a074d21 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.3.2

Changes:	https://github.com/google/osv-scanner/compare/v1.2.0...v1.3.2
1.2.0_1
08 Apr 2023 15:13:25
commit hash: ff40d94c1d2c808f3b54fad0e0a0a18dd9c62912commit hash: ff40d94c1d2c808f3b54fad0e0a0a18dd9c62912commit hash: ff40d94c1d2c808f3b54fad0e0a0a18dd9c62912commit hash: ff40d94c1d2c808f3b54fad0e0a0a18dd9c62912 files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after lang/go{119,120} update
1.2.0
11 Mar 2023 18:08:47
commit hash: 2f5d199ed7fc428bc88423678bc653bcabe04645commit hash: 2f5d199ed7fc428bc88423678bc653bcabe04645commit hash: 2f5d199ed7fc428bc88423678bc653bcabe04645commit hash: 2f5d199ed7fc428bc88423678bc653bcabe04645 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.2.0

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.2.0
1.1.0_1
09 Mar 2023 19:18:07
commit hash: 09079730e9ca1d59129935a6046cbb7ee5e4a93dcommit hash: 09079730e9ca1d59129935a6046cbb7ee5e4a93dcommit hash: 09079730e9ca1d59129935a6046cbb7ee5e4a93dcommit hash: 09079730e9ca1d59129935a6046cbb7ee5e4a93d files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after Go ports update
1.1.0
20 Feb 2023 19:01:59
commit hash: b9e670b2a0464cbf89fe559c2a65cf0699d269aecommit hash: b9e670b2a0464cbf89fe559c2a65cf0699d269aecommit hash: b9e670b2a0464cbf89fe559c2a65cf0699d269aecommit hash: b9e670b2a0464cbf89fe559c2a65cf0699d269ae files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.1.0

Changes:	https://github.com/google/osv-scanner/compare/v1.0.2...v1.1.0
1.0.2_3
20 Feb 2023 19:01:58
commit hash: 87ea824e1c06e8418d5b248d9d4a01409e700d54commit hash: 87ea824e1c06e8418d5b248d9d4a01409e700d54commit hash: 87ea824e1c06e8418d5b248d9d4a01409e700d54commit hash: 87ea824e1c06e8418d5b248d9d4a01409e700d54 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Pin Go version to 1.19

Numerous packages currently do not support Go 1.20 yet,
and fail with the following:

version "go1.19.5" does not match go tool version "go1.20"

For now, pin the Go version used to 1.19, until upstream
supports 1.20.
1.0.2_3
15 Feb 2023 19:06:01
commit hash: 56b5ec772f679a600dabe41622c1350594628286commit hash: 56b5ec772f679a600dabe41622c1350594628286commit hash: 56b5ec772f679a600dabe41622c1350594628286commit hash: 56b5ec772f679a600dabe41622c1350594628286 files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after lang/go{119,120} update
1.0.2_2
09 Feb 2023 21:55:23
commit hash: 2297efc51b0f75d25389b742048fb7e9b2d96f0dcommit hash: 2297efc51b0f75d25389b742048fb7e9b2d96f0dcommit hash: 2297efc51b0f75d25389b742048fb7e9b2d96f0dcommit hash: 2297efc51b0f75d25389b742048fb7e9b2d96f0d files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTREVISION after GO_DEFAULT update.
1.0.2_1
14 Jan 2023 11:31:17
commit hash: 3b383d833aadb5e3e89d8ee3db1fef37ac239af6commit hash: 3b383d833aadb5e3e89d8ee3db1fef37ac239af6commit hash: 3b383d833aadb5e3e89d8ee3db1fef37ac239af6commit hash: 3b383d833aadb5e3e89d8ee3db1fef37ac239af6 files touched by this commit
Dmitri Goutnik (dmgk) search for other commits by this committer
all: Bump PORTVERSION after lang/go{118,119} update
1.0.2
21 Dec 2022 20:29:54
commit hash: 5bd3784fa2494a1f30557ec6c22c9c68ee0c9f9acommit hash: 5bd3784fa2494a1f30557ec6c22c9c68ee0c9f9acommit hash: 5bd3784fa2494a1f30557ec6c22c9c68ee0c9f9acommit hash: 5bd3784fa2494a1f30557ec6c22c9c68ee0c9f9a files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Update to 1.0.2

Changes:	https://github.com/google/osv-scanner/releases/tag/v1.0.2
1.0.1
19 Dec 2022 05:07:06
commit hash: b2dc69c0153f1d16549950550a8aeafb78adeda0commit hash: b2dc69c0153f1d16549950550a8aeafb78adeda0commit hash: b2dc69c0153f1d16549950550a8aeafb78adeda0commit hash: b2dc69c0153f1d16549950550a8aeafb78adeda0 files touched by this commit
Lewis Cook (lcook) search for other commits by this committer
security/osv-scanner: Vulnerability scanner written in Go which uses the OSV
database

Use OSV-Scanner to find existing vulnerabilities affecting your projects
dependencies.

OSV-Scanner provides an officially supported frontend to the OSV database
that connects a projects list of dependencies with the vulnerabilities
that affect them. Since the OSV.dev database is open source and distributed,
it has several benefits in comparison with closed source advisory databases
and scanners:

* Each advisory comes from an open and authoritative source.
* Anyone can suggest improvements to advisories, resulting in a very high
  quality database.
* The OSV format unambiguously stores information about affected versions
  in a machine-readable format that precisely maps onto a developers list
  of packages.

The above all results in fewer, more actionable vulnerability notifications,
which reduces the time needed to resolve them.

WWW: https://github.com/google/osv-scanner

Number of commits found: 25