OpenSSF publication
OSV Record (vulnerability record format)
Also known as: OSV Record
The serialised vulnerability-record format produced by OSV-aligned databases (osv.dev, GHSA, PyPA, Go vuln DB) and consumed by vuln scanners and SCA tools. Distinct from the `osv-schema` project, which is the authoring effort defining the f…
Relationships
Outgoing
-
extendsOSV Schema & OpenVEXpublication
The artifact (the record format itself) is the concrete instance of what the OSV Schema project specifies.
Incoming
-
consumed byOpenSSF Scorecardneeds-review
Scorecard reads vulnerability data via the OSV API; whether that counts as consuming OSV records or only querying the database is a curator judgement call.