google/osv-scanner v2.3.8

on GitHub

Fixes:

• Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and opencontainers/runtime-spec). (#2782)
• Bug #2762 Skip packages with short commit hashes instead of aborting scan.
• Bug #2781 Secure file path handling with os.OpenRoot.
• Bug #2766 Correct typos across docs, configs, and Go source.

Misc:

• Update osv-scalibr to v0.4.6-0.20260504042738-9293bfa4f86f.