Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source

This post announces OSV-Scanner V2.0.0, integrating OSV-SCALIBR to broaden dependency extraction (e.g., Node, Python wheels, Java uber jars, Go binaries), adding layer- and base image–aware scanning for Debian/Ubuntu/Alpine containers, introducing an interactive local HTML report format, and expanding guided remediation to Maven pom.xml with machine-readable outputs and new strategies. It also outlines plans to converge OSV-Scanner and OSV-SCALIBR further, expand ecosystem support, deliver full filesystem accountability for containers, integrate reachability analysis, and add VEX support, inviting community use and contributions.