Google OSV-Scanner (Open Source)

Explore this developer service’s free allowance, critical restrictions and official documentation before deploying.

INCLUDED FREE ALLOWANCE

Apache-2.0 open-source CLI scans project dependencies, lockfiles and container images against known OSV vulnerabilities; no vendor software seat or scan quota.

Plan details

Plan: Ongoing free allowance
Deployment model: Local / embedded
Credit card: Not required
Commercial use: Allowed
Added to directory (UTC): 2026-10-29
Last checked: 2026-10-29

Important restrictions

Run locally or in your own CI; CI compute and storage may cost extra. Online scans query OSV.dev/deps.dev with dependency metadata; offline mode needs downloaded databases. Guided remediation can execute package-manager scripts.

View official documentation

Independent community listing, not affiliated with the provider. Always check the latest billing policy and quotas before enabling paid usage.