Vulnerability scanner written in Go which uses the data provided by https://osv.dev
- Repository: github.com/google/osv-scanner
- Commit:
a4d0a04916e101efc0db563d6269713a03cbf00b· HEAD nowf455353— re-scan to update - Analyzed: 2026-10-12T18:56:07-03:00 (153.8s)
- Engine: local · go-crap 0.5.1
go-crap command
go-crap scan --format json --no-progress --verbose -o tmp.json --coverage-profile .go-crap-cover.out ./...
Trend
History
| Date | Commit | Combined | Average | Funcs | Exceeded | Engine |
|---|---|---|---|---|---|---|
| 2026-08-27 | a67bcfe | 10129.57 | 16.88 | 600 | 50 | local |
| 2026-08-30 | 78bc246 | 10129.57 | 16.88 | 600 | 50 | local |
| 2026-09-02 | de9c035 | 10130.57 | 16.88 | 600 | 50 | local |
| 2026-10-12 | a4d0a04 | 12009.01 | 19.03 | 631 | 59 | local |
Top offenders
| Crap | Complexity | Coverage | Function | File |
|---|---|---|---|---|
| 1260.00 | 35 | 0.0% | printSummaryResult | internal/output/table.go:114 |
| 930.00 | 30 | 0.0% | run | cmd/osv-reporter/main.go:40 |
| 552.00 | 23 | 0.0% | rustAnalysis | internal/sourceanalysis/rust.go:35 |
| 552.00 | 23 | 0.0% | *vcrResponseNormalizingTransport.updateOfflineDB | cmd/osv-scanner/internal/testcmd/vcr.go:922 |
| 342.00 | 18 | 0.0% | action | cmd/osv-scanner/scan/image/command.go:40 |
| 272.00 | 16 | 0.0% | buildZipInMemory | cmd/osv-scanner/internal/testcmd/vcr.go:1014 |
| 266.65 | 17 | 4.8% | DoContainerScan | pkg/osvscanner/osvscanner.go:169 |
| 240.00 | 15 | 0.0% | *vcrResponseNormalizingTransport.normalizeVulnResponse | cmd/osv-scanner/internal/testcmd/vcr.go:729 |
| 215.53 | 17 | 11.8% | determineReturnErr | pkg/osvscanner/osvscanner.go:374 |
| 210.00 | 14 | 0.0% | run | cmd/osv-scanner/internal/testcmd/run.go:47 |