Download Latest Version
diagnose_3.18.2_darwin_amd64.zip (1.2 MB)
Get an email when there's a new version of FOSSA CLI
- Container scanning:
fossa container analyzenow reports Go module dependencies embedded in Go binaries (built with Go >= 1.18) found in container image layers as regular Go dependencies, supporting images without package manager metadata such asscratchand distroless images (#1740) - Bun: Dependencies reachable only through a
devDependenciesentry are now reported as development dependencies instead of production dependencies. - Analysis: JSON manifest files with a leading UTF-8 byte order mark (commonly written by Windows tooling, e.g. in NuGet
project.json) no longer fail to parse. - NuGet:
project.jsonfiles that are not NuGet manifests (e.g. Nx project configuration) are no longer claimed by the NuGet analyzer, so they no longer fail analysis withkey "dependencies" not found. - NuGet:
project.jsonmanifests may omit the top-leveldependencieskey. - NuGet:
project.jsondependencies declared per-framework underframeworksare now reported.
