Tamp.OsvScanner.V2
Tamp CommandPlan wrapper for Google's `osv-scanner` (2.x). Cross-ecosystem SCA: reads a CycloneDX SBOM or per-language lockfiles, queries OSV.dev (npm, PyPI, Cargo, Go, Maven, NuGet, Packagist, Pub, …), emits SARIF or CycloneDX 1.5 with inline VEX. Pinned to 2.x — the 1→2 boundary restructured the CLI around subcommands and deprecated the original --sbom-only invocation form.
View on Github
Activity
- Latest release
- 3mo ago
- Total releases
- 3
- Cadence
- ~3 days
- Last 12 months
- 3
Reach
- Stars
- —
Details
- License
- MIT
- First release
- May 18, 2026
Releases
| Version | Released | |
|---|---|---|
1.11.2
patch
| ||
1.11.1
patch
| ||
1.11.0
initial
|