Under maintenance

Pricing

from $1.00 / 1,000 dependency cve checkeds

Try for free

Go to Apify Store

Container CVE Matcher

Under maintenance

Try for free

Matches a dependency list, lockfile, or SBOM against OSV.dev to report

Pricing

from $1.00 / 1,000 dependency cve checkeds

Rating

0.0

(0)

Developer

Dennis

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Container CVE Matcher — Exact OSV.dev Version Match API through CLI

The Apify CLI is the official tool that allows you to use Container CVE Matcher locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Container CVE Matcher API in Python

Container CVE Matcher API in JavaScript

Container CVE Matcher OpenAPI definition

Container CVE Matcher API

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner at $0.02 per finding: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.

Kyle Maloney

Dependency SBOM Auditor

timely_quarterstaff/dependency-sbom-auditor

Parse a dependency manifest (package.json, requirements.txt, pyproject.toml, go.mod, Cargo.toml, Gemfile, composer.json) from text or a public raw URL into a clean dependency list + a CycloneDX SBOM (JSON). Deterministic, no AI. Optional free keyless OSV.dev advisory enrichment. SSRF-guarded.

Ahmed Moussa

OSV.dev Vulnerabilities Scraper

crawlerbros/osv-vulnerabilities-scraper

Scrape OSV.dev, Google's open vulnerability database covering NPM, PyPI, Go, Maven, NuGet, Cargo, RubyGems, GitHub Actions, OS distros, and more. Look up vulnerabilities by package, fetch a specific OSV/GHSA/CVE record, or batch-query an entire dependency tree.

Crawler Bros

Syft SBOM Generator

ayeeyee/syft-sbom-generator

Generate a real, standards-compliant SBOM (Software Bill of Materials) for a container image or git repository using Syft, in CycloneDX or SPDX format. Get a full dependency inventory covering OS packages and application libraries across every major ecosystem. $0.49 per generated SBOM.

Virtual Footprint LLC

DepGuard MCP — Dependency Vulnerability Scanner

snipr/depguard-mcp

MCP server that stops AI coding agents from installing vulnerable packages. Checks any package against OSV.dev, or scans an entire lockfile (npm, PyPI, Cargo, Go & more) in one call — with severity thresholds, banned packages and triaged-CVE waivers.

Snithin P R

GitHub Dependency Risk Triage with OSV

thirdwatch/github-dependency-risk-triage

Read dependency manifests through a GitHub MCP connector, check pinned versions against OSV, and create or update a source-linked review issue without changing code.

Thirdwatch

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC