Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / MobSF/mobsfscan issues and pull requests

#106 - Update kotlin_rules.yaml

Pull Request - State: closed - Opened by ajinabraham 7 days ago

#105 - Ensure multiple suppressions work as expected

Pull Request - State: open - Opened by mattmook about 1 month ago

#104 - Multiple suppressions on the same rule_id only removes one instance

Issue - State: open - Opened by mattmook about 1 month ago - 1 comment

#103 - Support multiprocessing strategy

Pull Request - State: closed - Opened by ajinabraham 3 months ago

#102 - HOTFIX: Install semgrep 1.86.0 as a dependency

Pull Request - State: closed - Opened by ajinabraham 3 months ago

#101 - Explicit semgrep install

Pull Request - State: closed - Opened by ajinabraham 3 months ago

#99 - Scanning with 0.4.2 fails on Azure Pipelines due to dependency failure

Issue - State: open - Opened by vpuonti 3 months ago - 5 comments

#98 - I scan the others as normal But this folder will have error

Issue - State: open - Opened by cxf-boluo 3 months ago - 2 comments

#97 - False positives of android_kotlin_webview_debug

Issue - State: closed - Opened by madlymad 3 months ago - 4 comments

#96 - Sarif update

Pull Request - State: closed - Opened by ajinabraham 3 months ago

#92 - Restrict output width?

Issue - State: open - Opened by below 5 months ago - 1 comment

#91 - Fix SARIF and duplication issues

Pull Request - State: closed - Opened by ls-valentinas-bakaitis 5 months ago - 8 comments

#90 - SARIF output violates the spec and puts all locations into one result

Issue - State: closed - Opened by valentinas 5 months ago - 4 comments

#89 - Empty MobSF Scan Results in Bitbucket Pipeline

Issue - State: open - Opened by YuriBanyuwang1 5 months ago

#88 - False negatives: hardcoded secrets

Issue - State: open - Opened by vasconcedu 7 months ago - 1 comment

#87 - Scan of Android network_security_config fails with multiple domain-configs

Issue - State: open - Opened by olaf-a 8 months ago - 3 comments

#86 - TypeError: 'NoneType' object is not subscriptable

Issue - State: open - Opened by emersonramos 8 months ago - 1 comment

#85 - improve description and reference format

Pull Request - State: closed - Opened by sebasrevuelta 8 months ago - 1 comment

#84 - New rules and version bump

Pull Request - State: closed - Opened by ajinabraham 9 months ago

#83 - fix: mobsfscan.yml to run with correct permissions

Pull Request - State: open - Opened by maen08 10 months ago - 1 comment

#82 - fix possible redirect ssrf

Pull Request - State: closed - Opened by ajinabraham 11 months ago

#81 - [SECURITY] Fix SSRF in applink check, dependency update.

Pull Request - State: closed - Opened by ajinabraham 11 months ago

#78 - False Positive Issues on Android 34

Issue - State: closed - Opened by Heckfer about 1 year ago - 5 comments

#77 - Threadpool, SDK bump, handle asterik in host

Pull Request - State: closed - Opened by ajinabraham about 1 year ago

#76 - Android API 34 missing from ANDROID_API_LEVEL_MAP

Issue - State: closed - Opened by arttujo about 1 year ago - 4 comments

#74 - Update sonarqube.py

Pull Request - State: closed - Opened by ajinabraham about 1 year ago

#73 - Make mandatory field "filePath" not nullable for sonarqube output

Pull Request - State: closed - Opened by krazzbeluh about 1 year ago

#72 - Semantic Grep takes forever

Issue - State: open - Opened by OgnjenKop about 1 year ago - 1 comment

#71 - Bump mobsfscan (performance improvements from libsast bump)

Pull Request - State: closed - Opened by ajinabraham over 1 year ago

#70 - semgrep + libsast bump

Pull Request - State: closed - Opened by ajinabraham over 1 year ago

#69 - update objc biometric rule + all rule description

Pull Request - State: closed - Opened by ajinabraham over 1 year ago

#68 - Imported: semgrep android rules

Issue - State: open - Opened by ajinabraham over 1 year ago - 2 comments

#67 - Manifest pre scan suppression

Pull Request - State: closed - Opened by ajinabraham over 1 year ago

#66 - Update SECURITY.md

Pull Request - State: closed - Opened by ajinabraham over 1 year ago

#64 - SonarQube compatible format is not working

Issue - State: closed - Opened by iducool over 1 year ago - 1 comment

#63 - Unable to run mobsfscan on android (Kotlin) project

Issue - State: closed - Opened by OgnjenKop over 1 year ago - 4 comments

#61 - CodeQL Action Deprecation

Issue - State: closed - Opened by sathish-kishore over 1 year ago - 3 comments

#60 - No issues found when running scan

Issue - State: closed - Opened by jgardezy over 1 year ago - 1 comment

#59 - uncontrolled exception when scanning an app

Issue - State: closed - Opened by javixeneize almost 2 years ago - 9 comments

#58 - Android XML checks failed

Issue - State: closed - Opened by L3m0nb4tt3ry almost 2 years ago - 4 comments

#57 - html report without format

Issue - State: closed - Opened by javixeneize almost 2 years ago - 1 comment

#56 - Question - CVSS in config file

Issue - State: closed - Opened by u001157 almost 2 years ago - 1 comment

#55 - How to send the --sonarqube output to my Sonarqube instance?

Issue - State: closed - Opened by matheusinfosec almost 2 years ago - 1 comment

#53 - Can it scan ios and android source code at the same time?

Issue - State: closed - Opened by chenbokun97 almost 2 years ago - 5 comments
Labels: enhancement

#52 - Resource not accessible by integration

Issue - State: closed - Opened by mvineza almost 2 years ago - 1 comment

#51 - Android XML Manifest and NSC Checks

Pull Request - State: closed - Opened by ajinabraham about 2 years ago - 1 comment

#50 - Option to force zero exit code.

Pull Request - State: closed - Opened by ajinabraham about 2 years ago

#48 - Make ignore-filenames and ignore-paths support wildcards

Issue - State: closed - Opened by TimothyChilvers about 2 years ago - 3 comments

#47 - [Snyk] Security upgrade python from 3.9-slim-buster to 3.11.0-slim

Pull Request - State: closed - Opened by ajinabraham about 2 years ago

#46 - Add CodeQL workflow for GitHub code scanning

Pull Request - State: closed - Opened by lgtm-com[bot] over 2 years ago

#45 - Include `security-severity` as property of each rule

Pull Request - State: closed - Opened by david-wiggs over 2 years ago - 3 comments

#44 - Include CWE information in rule tags for sarif output

Pull Request - State: closed - Opened by david-wiggs over 2 years ago - 3 comments

#43 - use `--no-cache-dir` flag to `pip` in dockerfiles to save space

Pull Request - State: closed - Opened by Rajpratik71 over 2 years ago

#42 - Error while running on an Android project

Issue - State: closed - Opened by twittemb over 2 years ago - 1 comment

#39 - Error !!! TypeError: 'NoneType' object is not subscriptable

Issue - State: closed - Opened by effortlessdevsec over 2 years ago - 2 comments

#38 - Version bump

Pull Request - State: closed - Opened by ajinabraham over 2 years ago

#37 - fix(filePath): remove nullable state of the filePath mandatory field

Pull Request - State: closed - Opened by DPutkov over 2 years ago - 3 comments

#36 - Kotlin and Swift scans returning differerent codes.

Issue - State: closed - Opened by OlivettiOriana over 2 years ago - 3 comments

#34 - Erroneous detection of ios_banned_api. "Match String gets("

Issue - State: closed - Opened by batkov over 2 years ago - 2 comments

#33 - SSLContext.init "null" finding in accept_self_signed.yaml

Issue - State: closed - Opened by coheigea almost 3 years ago - 2 comments

#32 - semgrep v0.84.0 support

Issue - State: closed - Opened by nikhilvats1 almost 3 years ago - 1 comment

#31 - Sonarqube primary location information

Pull Request - State: closed - Opened by fnxpt about 3 years ago - 3 comments

#30 - Scans in json format are not reproducible

Issue - State: closed - Opened by antnks about 3 years ago - 3 comments

#29 - Write semgrep kotlin rules

Issue - State: open - Opened by ajinabraham about 3 years ago - 1 comment

#28 - Mac M1 ,scan android java file will throw error

Issue - State: closed - Opened by peachDaddy about 3 years ago - 1 comment

#27 - a code error: $SX should be $X

Issue - State: closed - Opened by ienho about 3 years ago - 1 comment

#26 - Cannot output the scan result to HTML file

Issue - State: closed - Opened by misa335 about 3 years ago - 2 comments

#25 - Filter rules pre-scan

Issue - State: closed - Opened by kiwiz about 3 years ago - 4 comments

#24 - Only output issues/vulns exceeded a severity threshold

Issue - State: closed - Opened by myvali998 about 3 years ago - 1 comment

#23 - Link to documentation for rules (re-open)

Issue - State: closed - Opened by FlashSheridan about 3 years ago - 3 comments

#21 - Rule ignores Kotlin property getter

Issue - State: closed - Opened by reestolonio over 3 years ago - 2 comments

#20 - provide default file path for sonarqube

Pull Request - State: closed - Opened by fnxpt over 3 years ago - 15 comments

#19 - add match to description

Pull Request - State: closed - Opened by fnxpt over 3 years ago - 2 comments

#18 - remove columns

Pull Request - State: closed - Opened by fnxpt over 3 years ago - 3 comments

#17 - Sonarqube report invalid location

Issue - State: closed - Opened by LeoLogeart over 3 years ago - 8 comments

#16 - Sonarqube report invalid columns

Issue - State: closed - Opened by LeoLogeart over 3 years ago - 6 comments

#15 - output the same result twice.

Issue - State: closed - Opened by ghetto2199 over 3 years ago - 1 comment

#14 - .mobsf does not apply when path(s) are specified

Issue - State: closed - Opened by mywristbands over 3 years ago - 2 comments

#13 - UnAble to Setup the MobSF on MAC

Issue - State: closed - Opened by HiteshGenesis over 3 years ago

#12 - Rules for the manifest and network-security-config files

Issue - State: closed - Opened by malexmave over 3 years ago - 1 comment

#10 - Add severity-filter feature

Pull Request - State: closed - Opened by ansidorov over 3 years ago

#9 - Ignoring errors by severity

Issue - State: closed - Opened by ansidorov over 3 years ago - 1 comment

#8 - mobsfscan doesn't work on Windows

Issue - State: closed - Opened by nibarius over 3 years ago - 3 comments

#7 - Semgrep rule for webview setAllowFileAccess

Pull Request - State: closed - Opened by torque59 over 3 years ago - 1 comment

#6 - Fix negated messages and improve certain patterns

Pull Request - State: closed - Opened by streichsbaer over 3 years ago - 2 comments

#5 - hosting

Issue - State: closed - Opened by ajinabraham over 3 years ago

#4 - Adding support for Actions and Pipenv files

Pull Request - State: closed - Opened by GeekMasher almost 4 years ago - 1 comment

#3 - GitHub Action Private

Issue - State: closed - Opened by Moose0621 almost 4 years ago - 1 comment

#2 - Do not scan large files

Issue - State: closed - Opened by ajinabraham almost 4 years ago - 1 comment

#1 - Alpha

Pull Request - State: closed - Opened by ajinabraham about 4 years ago