DEDUPED Hot AI repos. Real use cases. What people build. Get the Monday 5

How to scan dependencies without a network connection with Osv Scanner

Download the vulnerability database once, then scan locally with no calls to OSV.dev.

Short answer: Install OSV-Scanner from the releases page; then run osv-scanner --offline --download-offline-databases ./path/to/your/dir once with network access; Rerun the same command later without a connection. All steps.

Who it is forAn engineer on an air-gapped or privacy-sensitive build machine.

The problemSending dependency lists to an external API is not always allowed.

The outcomeA vulnerability scan that runs against a local database.

What you need first

  • A prebuilt binary from the releases page, or Go to run go install
  • A project directory with lockfiles or manifests, or a container image
  • Network access to OSV.dev, unless you use offline mode

Steps

  1. Install OSV-Scanner from the releases page
  2. Run osv-scanner --offline --download-offline-databases ./path/to/your/dir once with network access
  3. Rerun the same command later without a connection
  4. Review the findings

Prompt for your agent

Using google/osv-scanner, run `osv-scanner --offline --download-offline-databases ./path/to/your/dir` on <my project> and report the vulnerabilities found.

Caveat. The database can also be downloaded manually per the README.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for google/osv-scanner and "Scan dependencies without a network connection"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer