We have exciting plans for the remainder of the year, including: Continued OSV-SCALIBR Convergence: We will continue to converge OSV-Scanner and OSV-SCALIBR to bring OSV-SCALIBR’s functionality to OSV-Scanner’s CLI interface.Expanded Ecosystem Support: We'll expand the number of ecosystems we support across all the features currently in OSV-Scanner, including more languages for guided remediation, OS advisories for container scanning, and more general lockfile support for source code scanning.Full Filesystem Accountability for Containers: Another goal of osv-scanner is to give you the ability
Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source… The Evolution of Verifiable Trust By evolving our previous binary transparency coverage from production Pixel images to Google software across the entire Android ecosystem, we are raising the bar. …
… Expanded Ecosystem Support: We'll expand the number of ecosystems we support across all the features currently in OSV-Scanner, including more languages for guided remediation, OS advisories for container scanning, and more general lockfile support for source code scanning. …
… OSV-SCALIBR combines Google’s internal vulnerability management expertise into one scanning library with significant new capabilities such as: SCA for installed packages, standalone binaries, as well as source code OSes package scanning on Linux COS, Debian, Ubuntu, RHEL, and much more , Windows, a… …
… Ecosystem Scale : By using hybrid signatures for APKs, developers can create a protected transition that preserves current trust while adding post-quantum defenses to block unauthorized updates. …
Security Supporting Rowhammer research to protect the DRAM ecosystem Sep 15, 2025 · Daniel Moghimi Rowhammer is a complex class of vulnerabilities across the industry. …
… Android OS verification notifies a user that their device is running an official Android build Alongside this feature, we are taking another step toward ecosystem-wide transparency by utilizing a public, append-only ledger. …
… Hardware Trust: Android Key Attestation in Pixel 10 is built on support for Device Identifier Composition Engine DICE by Tensor, and Remote Key Provisioning RKP to establish a trust chain from the moment the device starts up to the OS, stamping out the most common forms of abuse on Android. …
… We extend our deepest gratitude to the dedicated researchers who make the Android ecosystem safer. …