add osv-scanner