Native Deno support for osv-scanner #32

New issue

Open

opened 2026-10-13 15:55:20 +00:00 by anish · 0 comments

anish commented

2026-10-13 15:55:20 +00:00

Owner

Currently we have this workaround in security.nix:

(lib.mkIf cfg.osvScanner.enable {
  # TODO: deno.lock is unsupported
  "security:osv-scanner".exec = ''
    rc=0
    ${pkgs.osv-scanner}/bin/osv-scanner scan source . || rc=$?
    [ "$rc" -eq 0 ] || [ "$rc" -eq 128 ]
  '';
})

Currently we have this workaround in `security.nix`: ```nix (lib.mkIf cfg.osvScanner.enable { # TODO: deno.lock is unsupported "security:osv-scanner".exec = '' rc=0 ${pkgs.osv-scanner}/bin/osv-scanner scan source . || rc=$? [ "$rc" -eq 0 ] || [ "$rc" -eq 128 ] ''; }) ```

anish added the

labels

2026-10-13 15:55:20 +00:00

anish added this to the DevOps TODO project

2026-10-13 23:21:23 +00:00