chheda-deshaw

Inquiry about the plans for the experimental offline mode

5

First, I'd like to express my appreciation for the work you've done with OSV-Scanner. It's a valuable tool for our projects, especially the Call Analysis for Go and Rust We...

Weird Behavior with C-Go projects

3

### Summary I'm relatively new to Go and have been learning as I go along. I noticed a potential issue with gosec and wanted to bring it to your attention....

Error while downloading the database in offline mode

2

I'm trying to use OSV-Scanner in the offline mode with the command: ```bash osv-scanner --offline-vulnerabilities --download-offline-databases --sbom=bom.json ``` Output: ``` Scanned path/to/bom.json file and found 137 packages Filtered 3 local/unscannable...

Downloads database even when VDB_HOME is present

1

I'm using the tool in an air-gapped environment where access to ghcr.io is restricted and goes through artifactory. I downloaded the VDB manually using steps mentioned here: https://github.com/appthreat/vdb/pkgs/container/vdbxz-app But when...