Course Overview

Your projects may hide dangerous vulnerabilities in their dependencies. Every moment without proper scanning puts your systems at risk, so you must act now. 

This course is your complete guide to using Google’s OSV-Scanner to secure your code. OSV-Scanner, launched by Google in December 2022, taps into the powerful OSV database to scan for known vulnerabilities in your open-source dependencies. You will learn how OSV-Scanner scans across 16 ecosystems, covering major languages and key platforms such as Android, Linux Kernel, Debian, Alpine, and OSS-Fuzz environments. The course walks you through vulnerability scanning basics, a deep dive into the OSV Database and Schema, and hands-on training for installing, configuring, running directory scans, analyzing lockfiles and SBOMs, and even scanning Docker images. You’ll also see how to interpret results, troubleshoot issues, and integrate scanning into your CI/CD pipeline for continuous security.  

By the end of this course, you will have the practical skills to perform vulnerability scanning using Google’s OSV-Scanner to protect your projects, reduce risks, and make your workflow more efficient.  

What You Will Learn

  • Gain the ability to perform comprehensive vulnerability scans that protect your software supply chain.
  • Learn the core principles of vulnerability scanning and management to build a strong security foundation.
  • Discover how the OSV Database, OpenSSF OSV Schema, and OSV API work together to detect and analyze vulnerabilities.
  • Follow step-by-step instructions to install, configure, and integrate OSV-Scanner into CI/CD pipelines for continuous security.
  • Develop practical skills for running directory scans, analyzing lockfiles and SBOMs, and applying advanced scanning techniques.
  • Learn to decode scan outputs, troubleshoot issues, and apply best practices through real-world case studies.

Program Curriculum

  • Vulnerability Scanning Essentials
  • Meet OSV-Scanner
  • Chapter 1 Quiz

  • OSV Database
  • OSV Schema
  • Automate Scans Using the OSV API
  • Chapter 2 Quiz

  • OSV Scanner Installation
  • Setup Walkthrough
  • Chapter 3 Quiz

  • Directory Scans
  • Leverage SBOMs for Supply Chain Security
  • Advanced Scanning Techniques
  • Integrate OSV Scanner Into CI/CD
  • Pre-commit Integration With OSV-Scanner
  • Chapter 4 Quiz

  • Decoding Scan Outputs
  • Troubleshooting
  • Case Study Deep Dive
  • Chapter 5 Quiz

  • Future Trends
  • Best Practices
  • Next Steps
  • Chapter 6 Quiz

  • Summary
Load more modules

Instructor

Mohammed Belghali

Mohammed Belghali is a Cybersecurity Engineer with over 7 years of experience in cyber defense and information security. He has worked in high-stakes governmental environments, designing and implementing secure architectures for critical infrastructures and leading cybersecurity operations that protect sensitive data against advanced threats. His hands-on work in vulnerability assessments, penetration testing, and system audits has built a strong foundation for ensuring robust security practices. 

Mohammed is passionate about merging cybersecurity with DevOps, and he has previously automated secure workflows using modern DevOps tools and cloud platforms. He has trained and mentored cybersecurity analysts, engineers, and students alike, sharing practical insights on cybersecurity, DevOps/DevSecOps practices, and the development and deployment of innovative solutions. 

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Fastest Way to Level Up Your Cybersecurity Skills

Invest in your future with flexible subscription plans that give you access to the world’s largest online cybersecurity course library. Whether you're exploring cybersecurity courses for beginners or advancing your expertise,
access in-demand courses, practical labs, and CTF challenges designed to support continuous learning.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Build your cybersecurity skills with 900+ bite-sized courses and curated learning paths designed for continuous learning.

$ 69.00
Billed monthly or $599.00 billed annually

What is included

  • 880+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Develop real-world cybersecurity skills through hands-on labs and CTF challenges designed for practical learning.

$ 79.00
Billed monthly or $699.00 billed annually

Everything in Pro, Plus:

  • 1600+ Hands-on lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Hands-on Labs and Challenges added every month

Related Courses

1 of 50