osv scanner reports the wrong debian status file

Open

#1,950 opened on Jun 15, 2025 1 comment 1 reaction 1 assignee Claimed by @another-rex View on GitHub

Dominant language: Go
Stars: 11k
Forks: 792
Avg merge: 1d 20h
Merged PRs (30d): 48

Description

Running `go run ./cmd/osv-scanner scan source --all-packages --format=json --lockfile=dpkg-status:../status > output.json` on a debian status file changes the output to Ubuntu:22.04

![Image](https://github.com/user-attachments/assets/e6d5d20f-19de-4dc6-b03a-46043d0b17be)

![Image](https://github.com/user-attachments/assets/c7f2bc98-55f5-4a4d-a527-52d8ff2ae35f)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

osv scanner reports the wrong debian status file

Description

Contributor guide

Assessment

Get new issues in your inbox