audit

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Chinese

Scan project dependencies for known vulnerabilities using the OSV database.

使用OSV数据库扫描项目依赖项中的已知漏洞。

Scan for vulnerabilities:

bash

git-pkgs vulns scan

Show who introduced each vulnerable dependency:

bash

git-pkgs vulns blame

Options:

扫描漏洞：

bash

git-pkgs vulns scan

查看引入每个易受攻击依赖项的人员：

bash

git-pkgs vulns blame

选项：

When vulnerabilities are found, check in order:

Reachability - is the vulnerable code path actually called? Many CVEs affect features you don't use.
Update - is a patched version available? Use
```
git-pkgs outdated <package>
```
to check.
Override transitive - force a newer version of the vulnerable transitive dependency.
Fork and patch - apply the security fix to a fork.
Remove - find an alternative or inline the functionality.
Accept risk - document why it's not exploitable in your context.

发现漏洞时，请按以下顺序处理：