Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Publisher’s description
What is OSV Scanner?
OSV Scanner is an open-source terminals & cli tool program for Windows from Google. It is written in Go.
Installation and requirements
Official installers exist for 64-bit and ARM64 as Portable. It runs without installation (portable).
Updates and version history
The current version is 2.7.0, released on October 12, 2026. 20 versions are listed since December 19, 2024, each with links to its own installer files. That is about 11 releases a year. The last update is less than a month old.
Popularity and file types
The Chocolatey package has been downloaded 3,584 times. The source code on GitHub (google/osv-scanner) has 11,231 stars. Similar programs include PowerShell, QPDF and Oh My Posh.
Project description on GitHub: “Vulnerability scanner written in Go which uses the data provided by https://osv.dev”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
- Frequent updates (about 11 a year)
- Large user base
In short: OSV Scanner is an open-source terminals & cli tool tool for 64-bit and ARM64 PCs. It is actively maintained.
Is OSV Scanner safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
9964ED64EC9A387391EB4CC006AD5C531154821AEF29B793E02C448DE4686438· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the google/osv-scanner repository on GitHub by the Open Source Security Foundation, last run on October 22, 2026.
- Actively maintained10
- Code review10
- Dependency update tool10
- No dangerous workflows10
- No binaries in the repository10
- Static code analysis10
- Published packages10
- Licence declared10
- Security policy10
- Signed releases10
- Tests in CI10
- Contributors from several organisations10
- Pinned dependencies9
- Restricted token permissions8
- Branch protection4
- OpenSSF Best Practices badge0
- Fuzzing0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 20 versions ›20 versions over 2 years · about 11 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 2.7.0Latest | October 12, 2026 | — | ARM64 Portable64-bit Portable |
| 2.6.0 | September 14, 2026 | — | 64-bit PortableARM64 Portable |
| 2.4.0 | June 18, 2026 | — | 64-bit PortableARM64 Portable |
| 2.3.8 | May 8, 2026 | — | 64-bit PortableARM64 Portable |
| 2.3.6 | May 1, 2026 | — | 64-bit PortableARM64 Portable |
| 2.3.5 | March 24, 2026 | — | ARM64 Portable64-bit Portable |
| 2.3.3 | February 12, 2026 | — | ARM64 Portable64-bit Portable |
| 2.3.2 | January 15, 2026 | — | ARM64 Portable64-bit Portable |
Install from the command line
Silent install ›winget install --id Google.OSVScanner -echoco install osv-scanner -yProgram files (.exe): osv-scanner.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- Category
- Terminals & CLI tools
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/google/osv-scanner
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64
- Installer
- Portable
- Version
- 2.7.0
- Released
- October 12, 2026
- Added to the catalogue
- February 6, 2025
- Versions listed
- 20
- Updates / year
- 11
- Chocolatey downloads
- 3,584
- GitHub stars
- 11,231
- GitHub forks
- 818
- Website
- github.com
- winget ID
- Google.OSVScanner
- Chocolatey package
- osv-scanner
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to OSV Scanner
See all ›-
PowerShell7.6.9.0PowerShell is a cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. PowerShell runs on Windows, Linux, and macOS.Open source689.6K ↓ -
QPDF12.4.2QPDF is a command-line tool and C++ library that performs content-preserving transformations on PDF files.Open source2.1M ↓ -
Open source820.8K ↓ -
Open source290.1K ↓ -
Open source1.5M ↓ -
Alacritty0.17.0Alacritty is a free and open-source GPU accelerated terminal emulator focused on performance and simplicity.Open source75.9K ↓ -
Free5.9M ↓ -
Cygwin3.7.0-0.590.gdae171e433cdA large collection of GNU and Open Source tools which provide functionality similar to a Linux distribution on Windows.Open source2.6M ↓
Frequently asked questions
Is OSV Scanner free?
Yes. OSV Scanner is open-source software under the Apache-2.0 licence.
Is OSV Scanner safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install OSV Scanner with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does OSV Scanner run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of OSV Scanner?
The versions page lists all 20 versions with links to their official installer files, back to December 19, 2024.
Can I use OSV Scanner without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to OSV Scanner?
PowerShell, QPDF, Oh My Posh, fzf and yq. The alternatives page compares them.
