osv

package

v0.1.3 Latest Latest Go to latest Published: Feb 16, 2026 License: MIT Imports: 9 Imported by: 0

Details

Package osv provides a vulnerability source backed by the OSV API.

View Source

const (
	DefaultAPIURL  = "https://api.osv.dev/v1"
	DefaultTimeout = 30 * time.Second
)

This section is empty.

This section is empty.

type Option func(*Source)

Option configures a Source.

func WithBaseURL(url string) Option

WithBaseURL sets a custom API base URL.

func WithHTTPClient(c *http.Client) Option

WithHTTPClient sets a custom HTTP client.

func WithUserAgent(ua string) Option

WithUserAgent sets the User-Agent header for API requests.

type Source struct {
	// contains filtered or unexported fields
}

Source implements vulns.Source using the OSV API.

func New(opts ...Option) *Source

New creates a new OSV source.

func (s *Source) Get(ctx context.Context, id string) (*vulns.Vulnerability, error)

Get fetches a specific vulnerability by ID.

func (s *Source) Name() string

Name returns "osv".

func (s *Source) Query(ctx context.Context, p *purl.PURL) ([]vulns.Vulnerability, error)

Query returns vulnerabilities affecting the package identified by the PURL.

func (s *Source) QueryBatch(ctx context.Context, purls []*purl.PURL) ([][]vulns.Vulnerability, error)

QueryBatch queries multiple packages at once.