~/blog/2025-10-13-vulnerability-scan-current-nixos-system

Vulnerability Scan Current NixOS System

Handy script to get all the vulnerabilities that make up your working system.

nix-shell -p grype sbomnix --run '
  sbomnix /run/current-system --csv /dev/null --spdx /dev/null --cdx sbom.cdx.json;
  grype sbom.cdx.json
'