Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Visit GitHub
Go
11.4k
874
116 contributors
Apache License 2.0
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast google/osv-scanner is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 5 – Nov 4, 2026

Stars +416 in 61 days

01020
19

Forks +70 in 61 days

0246
5

Merged PRs 104 in 61 days

051015
11

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15Oct 23Oct 31
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Sat, Sep 5, 2026+3+00
Sun, Sep 6, 2026+7+00
Mon, Sep 7, 2026+4+32
Tue, Sep 8, 2026+4+01
Wed, Sep 9, 2026+4+04
Thu, Sep 10, 2026+2+211
Fri, Sep 11, 2026+11+05
Sat, Sep 12, 2026+6+00
Sun, Sep 13, 2026+1+10
Mon, Sep 14, 2026+7+13
Tue, Sep 15, 2026+7+10
Wed, Sep 16, 2026+6+10
Thu, Sep 17, 2026+5+13
Fri, Sep 18, 2026+4+10
Sat, Sep 19, 2026+11+00
Sun, Sep 20, 2026+7+00
Mon, Sep 21, 2026+6+00
Tue, Sep 22, 2026+1+21
Wed, Sep 23, 2026+5+14
Thu, Sep 24, 2026+3+01
Fri, Sep 25, 2026+7+21
Sat, Sep 26, 2026+3+00
Sun, Sep 27, 2026+5+20
Mon, Sep 28, 2026+9+30
Tue, Sep 29, 2026+14+13
Wed, Sep 30, 2026+6+10
Thu, Oct 1, 2026+5+11
Fri, Oct 2, 2026+2+210
Sat, Oct 3, 2026+2+10
Sun, Oct 4, 2026+1+00
Mon, Oct 5, 2026+6+00
Tue, Oct 6, 2026+6+30
Wed, Oct 7, 2026+2+12
Thu, Oct 8, 2026+1+13
Fri, Oct 9, 2026+7+15
Sat, Oct 10, 2026+3+00
Sun, Oct 11, 2026+3+11
Mon, Oct 12, 2026+7+18
Tue, Oct 13, 2026+5+20
Wed, Oct 14, 2026+7+00
Thu, Oct 15, 2026+5+00
Fri, Oct 16, 2026+9+20
Sat, Oct 17, 2026+3+10
Sun, Oct 18, 2026+5+20
Mon, Oct 19, 2026+7+20
Tue, Oct 20, 2026+4+10
Wed, Oct 21, 2026+10+14
Thu, Oct 22, 2026+17+31
Fri, Oct 23, 2026+10+10
Sat, Oct 24, 2026+3+50
Sun, Oct 25, 2026+11+01
Mon, Oct 26, 2026+13+21
Tue, Oct 27, 2026+10+07
Wed, Oct 28, 2026+16+15
Thu, Oct 29, 2026+18+30
Fri, Oct 30, 2026+6+23
Sat, Oct 31, 2026+12+00
Sun, Nov 1, 2026+7+31
Mon, Nov 2, 2026+19+15
Tue, Nov 3, 2026+14+35
Wed, Nov 4, 2026+12+02
Total+416+70104
  • 1#1 on the list
  • 7Rank that day
  • Not trending
1

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    Mar 19, 2025 – Apr 24, 2026Best #3

    #1#5#10#15#20#25
    Top 10
    Jul 2024Jan 2025JulJan 2026Jul
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about google/osv-scanner, and every badge it has earned
    1. Oct 291 post

      • 10 github repos that keep a solo dev f*cking alive. 205K+ combined stars. one job each, from the first scan to the release. (1/10) GitHub CLI · 46.8K stars gh pr status shows every PR waiting on you…

        Read full on X, posted by @0x_fokki

        @0x_fokki · x.com

    2. 7 days earlier
    3. Oct 221 post

      • 依赖更新了，里面有没有已知漏洞？🔐 OSV-Scanner 能扫描项目依赖和锁文件，找出公开记录的安全问题。上线前多一道检查。🛡️ #DevSecOps #浇朋友 #蓝朋友 #互关 #fo

        Read full on X, posted by @T1doo_AI

        @T1doo_AI · x.com

    4. 13 days earlier
    5. Oct 91 post

      • recover() does not catch a Go stack overflow. A panic unwinds. Stack exhaustion is a fatal error: no unwinding, no deferred calls. The process exits. So unbounded recursion on untrusted input is not…

        Read full on X, posted by @iameythakur

        @iameythakur · x.com

    6. 29 days earlier
    7. Sep 102 posts

      • Getting a fix merged into a @Google repo: 1. File an issue, not a PR. A security finding is theirs to keep private or not. 2. They assign it back to you. 3. Sign the CLA. Two minutes. 4. Small PR,…

        Read full on X, posted by @iameythakur

        @iameythakur · x.com

      • been following this the past few days, IMO it's just a rogue bot/LLM, its owner probably doesn't even know what it's been up to just more slop on them interwebs now-a-days

        Read full on X, posted by @beepidibop

        @beepidibop · x.com

    8. Sep 71 post

      • 5/6 Full write-up, with the merged code and the regression test:

        Read full on X, posted by @iameythakur

        @iameythakur · x.com

    9. 28 days earlier
    10. Aug 103 posts

      • I built a tool to find bugs with any models including Kimi

        Read full on Reddit

        r/kimi

      • I built a tool to find bugs using any models

        Read full on Reddit

        r/devtools

      • I built a tool to find bugs using any models

        Read full on Reddit

        r/devsecops

    11. 2 months earlier
    12. Jun 71 post

      • 7 Tools for securing your CI/CD pipeline: 🔐 1. Gitleaks: Finds hardcoded secrets in commits and Git history before they reach production. 2. OSV-Scanner: Scans dependencies against OSV. dev and…

        Read full on X, posted by @twtayaan

        @twtayaan · x.com

    You might also like

    Repositories close to google/osv-scanner
    FeaturedAdvertise to 180K+ monthly visitors
    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    owasp-dep-scan/dep-scan

    Python

    OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

    1.3k143

    anchore/grype

    Go

    A vulnerability scanner for container images and filesystems

    13.2k938

    google/osv-scalibr

    Go

    OSV-SCALIBR: A library for Software Composition Analysis

    654225

    aquasecurity/trivy

    Go

    Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

    39k895

    safedep/vet

    Go

    Protect against malicious open source packages 🤖

    1.1k119

    savoirfairelinux/vulnscout

    Python

    SBOM Vulnerability Scanning & Assessment tool

    9032

    dependency-check/DependencyCheck

    Java

    OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

    7.8k1.4k

    fossas/fossa-cli

    Haskell

    Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.

    1.5k204

    ossf/cve-bin-tool

    Python

    The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

    1.8k700