osv.dev
osv.dev copied to clipboard
Build API for identifying vendored code
Given: file hashes Return:
- Repository URL
- CPEs
- Closest tag/version
Initially scoped to C/C++ projects.
@susperius has been working on this!
This is done: https://google.github.io/osv.dev/post-v1-determineversion/