osv-scanner

OSV-Scanner is an official supported command line tool that uses the OSV.dev database to find available vulnerabilities in the dependencies of projects. C/C++ can scan many programming languages, package manager, Linux operating system packages, and container images, such as Go, Python, and Rust. It also offers package version upgrade suggestions based on criteria such as depth of dependency and minimum degree of importance.