Tamp.OsvScanner.V2
1.11.0
Prefix Reserved
See the version list below for details.
dotnet add package Tamp.OsvScanner.V2 --version 1.11.0
NuGet\Install-Package Tamp.OsvScanner.V2 -Version 1.11.0
<PackageReference Include="Tamp.OsvScanner.V2" Version="1.11.0" />
<PackageVersion Include="Tamp.OsvScanner.V2" Version="1.11.0" />
<PackageReference Include="Tamp.OsvScanner.V2" />
paket add Tamp.OsvScanner.V2 --version 1.11.0
#r "nuget: Tamp.OsvScanner.V2, 1.11.0"
#:package Tamp.OsvScanner.V2@1.11.0
#addin nuget:?package=Tamp.OsvScanner.V2&version=1.11.0
#tool nuget:?package=Tamp.OsvScanner.V2&version=1.11.0
Tamp CommandPlan wrapper for Google's `osv-scanner` (2.x). Cross-ecosystem SCA: reads a CycloneDX SBOM or per-language lockfiles, queries OSV.dev (npm, PyPI, Cargo, Go, Maven, NuGet, Packagist, Pub, …), emits SARIF or CycloneDX 1.5 with inline VEX. Pinned to 2.x — the 1→2 boundary restructured the CLI around subcommands and deprecated the original --sbom-only invocation form.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net8.0 is compatible. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 is compatible. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- Microsoft.Extensions.FileSystemGlobbing (>= 9.0.0)
- Tamp.Core (>= 1.11.0)
-
net8.0
- Microsoft.Extensions.FileSystemGlobbing (>= 9.0.0)
- Tamp.Core (>= 1.11.0)
-
net9.0
- Microsoft.Extensions.FileSystemGlobbing (>= 9.0.0)
- Tamp.Core (>= 1.11.0)
NuGet packages (1)
Showing the top 1 NuGet packages that depend on Tamp.OsvScanner.V2:
| Package | Downloads |
|---|---|
|
Tamp.Security.Pipeline
Tamp meta-package — one PackageReference, one base-class inheritance, get the whole Wave 1+2 security chain: CycloneDX SBOM → SAST (OpenGrep + Roslyn) → SCA (osv-scanner + Dependency-Track) → Trivy secrets+misconfig → DefectDojo reimport. Adopters override `SecurityProductName` + `SecuritySolutionPath` and run `tamp Security`. DT and DD legs are env-var-gated; producer half runs unconditionally. .NET-focused for v0 — non-.NET adopters override Sbom to use Tamp.Syft instead. |
GitHub repositories
This package is not used by any popular GitHub repositories.