Google Cloud expands vulnerability detection for Artifact Registry using OSV

Google Cloud’s Artifact Analysis has expanded vulnerability scanning coverage by integrating with the Open Source Vulnerabilities (OSV) platform, broadening support to more language ecosystems, operating systems, and popular minimal base images (e.g., Wolfi and Distroless). Existing Artifact Registry and On Demand Scanning users automatically gain higher-fidelity findings across a wider set of dependencies, accessible via the Artifact Registry UI, Container Analysis API, and Pub/Sub. Looking ahead, Google plans to integrate these vulnerability findings with Security Command Center in 2025 to enhance comprehensive vulnerability management and risk prioritization.