Use OSV database to scan for vulnerabilities

Scan project based upon specified mode to determine if any vulnerable packages are detected.

Usage

osv_scan(mode, ...)

Arguments

mode

The kind of scan to perform.

...

Parameters passed to specific underlying functions for mode selected.

Value

A data.frame specifying which packages are vulnerable or not.

Details

The available scanning modes are: 'r_project', 'renv', and 'r_libath'. The 'r_libpath' mode simply performs all R project related scans at once. Emphasis is placed on scans of R related content. Additional parsing and scanning modes will be added over time as needed. If a mode does not exist for a particular purpose, alternate functions such as is_pkg_vulnerable() can be used with any list of package names for ecosystems available in the OSV database.

See also

is_pkg_vulnerable

Examples

if (FALSE) { # interactive()
osv_scan('r_libpath')
}