feat: Use osv-scalibr SBOM extractors

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

https://google.github.io/osv-scanner/

Apache License 2.0

6.27k stars 363 forks source link

Open another-rex opened 3 weeks ago

another-rex commented 3 weeks ago

Use osv-scalibr SBOM extractors rather than the internal ones.

Can't be merged yet as it is blocked on #1379