google/osv-scanner v2.0.0-beta2

on GitHub

This second beta release brings a series of fixes and improvements to the previous release.

Please post your feedback in the following threads:

• General V2 feedback
• Container scanning feedback

Improvements:

• Feature #1561 Updated HTML report for better contrast and usability
• Feature #1569 Add support for bun.lock lockfiles.
• Feature #1584 Make skip root git repository the default behavior.
• Feature #1547 Add experimental config support to the image command.
• Feature #1557 Allow setting port number when using the --serve flag with the new --port flag.

Fixes

• Fix #1585 Fixed issue where base images are occasionally duplicated.
• Fix #1597 Fixed issue where SBOM parsers are not correctly parsing CycloneDX files when using the bom.xml filename.
• Fix #1566 Fixed issue where offline scanning returns different results from online scanning.
• Fix #1538 Reduce memory usage when using guided remediation.

New Contributors

• @Riddhimaan-Senapati made their first contribution in #1557
• @pranjalagg made their first contribution in #1580

Full Changelog: v2.0.0-beta1...v2.0.0-beta2