Agent Friendly Code

google/osv-scanner

GitHub
https://github.com/google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

  • scanner
  • security-audit
  • security-tools
  • vulnerability-scanner
Stars:
11.4k
Language:
Go
Default branch:
main
Last scored:
Overall

At a glance

Rank
#84 of 401
Top 21% · #11 of 40 Go repos
Checks passed
8 of 17
Full list below
Best set up for
Claude Code
Score 85.9
Needs most work for
OpenHands
Biggest fix: .openhands/setup.sh (+10.0 pts)

What it has

What it's missing

What to fix first

Pick an AI agent

Showing fixes for Claude Code

  1. 1
    Pre-commit / git hooks
    Set up pre-commit (.pre-commit-config.yaml), husky, or lefthook to run format+lint on every commit.
    +5.3 pts
  2. 2
    Test suite
    Add a tests/ (or test/, __tests__/, spec/) directory with runnable tests. Document how to run them in AGENTS.md.
    +3.9 pts
  3. 3
    Reproducible dev env
    Add a Makefile or devcontainer or Dockerfile so the agent can set up the project in one command.
    +3.6 pts

Score for each AI agent

Each agent weighs the checks by its own docs. Under each score are its top three. How each agent is scored →

Claude Code
#74 of 401
85.9
  • ✓AGENTS.md / CLAUDE.md
  • ~Test suite
  • ~Reproducible dev env
Codex
#83 of 401
82.9
  • ✓AGENTS.md / CLAUDE.md
  • ✓README
  • ~Test suite
Pi
#84 of 401
82.0
  • ✓AGENTS.md / CLAUDE.md
  • ~Test suite
  • ✓Linter / formatter config
Kimi Code CLI
#90 of 401
81.9
  • ✓AGENTS.md / CLAUDE.md
  • ~Test suite
  • ✓Dependency manifest
Devin
#101 of 401
77.5
  • ~Reproducible dev env
  • ✓Dependency manifest
  • ~Test suite
Cursor
#85 of 401
75.4
  • ✗Cursor rules (.cursor/rules)
  • ✓README
  • ✓Type configuration
Aider
#90 of 401
74.2
  • ✗.aider.conf.yml
  • ✓Linter / formatter config
  • ~Test suite
Gemini CLI
#89 of 401
74.1
  • ✗GEMINI.md
  • ✓README
  • ~Test suite
OpenHands
#96 of 401
72.9
  • ✓CI configuration
  • ✓Dependency manifest
  • ~Reproducible dev env

Does google/osv-scanner have agent instructions?

An AGENTS.md (or CLAUDE.md) at the root tells AI coding agents how to build, test and work in the repo. A few agents also read a file of their own.

AGENTS.md / CLAUDE.md
AGENTS.md (new tab) · 4,648 characters
Agent-specific files
None: no GEMINI.md, .cursor/rules, .openhands/setup.sh, .aider.conf.yml or .agents/skills
Repos that have one
23 of 40 Go repos · 221 of 401 repos on the leaderboard · See examples →

All 17 checks · 8 passed

Skills (.agents/skills)· 0% pass
No .agents/skills/<name>/SKILL.md
AGENTS.md / CLAUDE.md· 100% pass
Substantive (4,648 characters)
AGENTS.md
.aider.conf.yml· 0% pass
No .aider.conf.yml at repo root
CI configuration· 100% pass
19 GitHub Actions workflows
.github/workflows
CONTRIBUTING guide· 100% pass
Guide present
CONTRIBUTING.md
Cursor rules (.cursor/rules)· 0% pass
No .cursor/rules/*.mdc or .cursorrules
Dependency manifest· 100% pass
Manifest present
go.mod
Reproducible dev env· 70% pass
Has Makefile
Makefile
GEMINI.md· 0% pass
No GEMINI.md at repo root
License file· 100% pass
License present
LICENSE
Linter / formatter config· 100% pass
Config detected
.prettierrc.json
.openhands/setup.sh· 0% pass
No .openhands/setup.sh
Pre-commit / git hooks· 0% pass
No pre-commit / husky / lefthook found
README· 100% pass
README detailed (11,064 characters)
README.md
Manageable size· 80% pass
1107 files
Test suite· 70% pass
Test files detected (cmd/osv-reporter/main_test.go)
cmd/osv-reporter/main_test.go
Type configuration· 100% pass
Typed language (Go)

How google/osv-scanner compares

vs leaderboard average
11.7 pts above
Average 66.8
vs Go average
7.5 pts above
Average 71.0
Stars among Go repos
#34 of 40

Missing here, and how many repos have it

  • Pre-commit / git hooks · passed by 29% of leaderboard repos, 13% of Go repos
  • Skills (.agents/skills) · passed by 17% of leaderboard repos, 10% of Go repos
  • Cursor rules (.cursor/rules) · passed by 4% of leaderboard repos, 0% of Go repos

One fix for the most agents: Pre-commit / git hooks would raise the score for all 9 agents, by up to 6.0 points.

Similar repos

Same language and host as this repo, closest in overall score.

All Go repos →

Add a badge to your README

Paste this at the top of the README. It shows the score, and links back to this page.

Agent friendly score for github/google/osv-scanner
[![Agent Friendly](https://agentfriendlycode.com/api/badge/github/google/osv-scanner.svg)](https://agentfriendlycode.com/repo/github/google/osv-scanner)

Check the score on every pull request

A GitHub Action posts one comment per pull request with how the score changed and why.