Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / future-architect/vuls issues and pull requests

#2034 - False Negatives in alpine CVE reporting

Issue - State: open - Opened by wagde-orca 5 days ago
Labels: bug

#2033 - Add support for SARIF reports

Issue - State: open - Opened by schewara 6 days ago
Labels: enhancement

#2032 - build: update go to 1.23

Pull Request - State: open - Opened by shino 7 days ago

#2031 - Unable to scan and get the report for Oracle Linux server

Issue - State: open - Opened by skm248 8 days ago - 1 comment
Labels: bug

#2030 - chore(deps): bump github.com/aquasecurity/trivy from 0.55.1 to 0.55.2

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago - 1 comment
Labels: dependencies, go

#2029 - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.4.0 to 1.4.1

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago - 3 comments
Labels: dependencies, go

#2028 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago
Labels: dependencies, go

#2027 - chore(deps): bump github.com/open-policy-agent/opa from 0.67.1 to 0.68.0

Pull Request - State: closed - Opened by dependabot[bot] 13 days ago
Labels: dependencies, go

#2026 - chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0 to 0.9.1

Pull Request - State: closed - Opened by dependabot[bot] 17 days ago
Labels: dependencies, go

#2025 - feat(oval/suse): skip comparing TDC package and non-TDC package

Pull Request - State: closed - Opened by MaineK00n 17 days ago - 3 comments

#2024 - False Positives in SUSE 12 SP3 Teradata kernels

Issue - State: closed - Opened by wagde-orca 22 days ago
Labels: bug

#2023 - chore(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, go

#2022 - chore(deps): bump github.com/aquasecurity/trivy from 0.54.1 to 0.55.0

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, go

#2021 - chore(deps): bump golang.org/x/text from 0.17.0 to 0.18.0

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, go

#2020 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, go

#2019 - Collection of licenses of installed packages

Issue - State: open - Opened by Deadlyelder 30 days ago
Labels: enhancement

#2018 - [WIP] Support for flatpak

Pull Request - State: open - Opened by Deadlyelder 30 days ago

#2017 - [WIP] Support for snap package manager

Pull Request - State: open - Opened by Deadlyelder 30 days ago

#2016 - [Feature] Support for flatpak and snap

Issue - State: open - Opened by Deadlyelder 30 days ago - 2 comments
Labels: enhancement

#2015 - chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.60.1 to 1.61.0 in the aws group

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, go

#2014 - feat!(models): add vulncheck kev

Pull Request - State: closed - Opened by MaineK00n about 1 month ago

#2013 - chore(deps): bump the aws group across 1 directory with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, go

#2012 - chore(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, go

#2011 - chore(deps): bump github.com/vulsio/goval-dictionary from 0.9.6-0.20240625074017-1da5dfb8b28a to 0.10.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, go

#2010 - feat(os): support for Arch Linux

Pull Request - State: open - Opened by Deadlyelder about 1 month ago - 2 comments

#2009 - [Feature] Arch Linux support

Issue - State: open - Opened by Deadlyelder about 1 month ago
Labels: enhancement

#2008 - chore(deps): bump github.com/samber/lo from 1.46.0 to 1.47.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, go

#2007 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, go

#2006 - feat(models): add new cveContentType trivy:azure

Pull Request - State: closed - Opened by TsubasaKanemitsu about 2 months ago

#2005 - chore(deps): bump github.com/gosnmp/gosnmp from 1.37.0 to 1.38.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#2004 - chore(deps): bump golang.org/x/text from 0.16.0 to 0.17.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#2003 - fix(detect/oracle): handle ksplice advisories

Pull Request - State: closed - Opened by MaineK00n about 2 months ago

#2002 - chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#2001 - chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#2000 - chore(deps): bump github.com/aquasecurity/trivy from 0.53.0 to 0.54.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#1999 - chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.2 to 1.58.3 in the aws group

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, go

#1998 - Known Host Error does not properly explain issues

Issue - State: closed - Opened by Rattkener 2 months ago - 8 comments
Labels: enhancement

#1997 - docs: correct ubuntu oval link

Pull Request - State: closed - Opened by MaineK00n 2 months ago

#1996 - The Ubuntu OVAL link in the README is dead

Issue - State: closed - Opened by mbomb007 2 months ago
Labels: bug

#1995 - chore(deps): bump github.com/docker/docker from 26.1.3+incompatible to 26.1.4+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, go

#1994 - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.2 to 1.4.0

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, go

#1993 - chore(deps): bump the aws group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, go

#1992 - chore(deps): bump github.com/samber/lo from 1.44.0 to 1.46.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1991 - chore(deps): bump github.com/emersion/go-smtp from 0.21.2 to 0.21.3

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1990 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1989 - False Positives in Redhat 8.6 EUS

Issue - State: open - Opened by wagde-orca 3 months ago - 10 comments
Labels: bug

#1988 - chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1987 - chore(deps): bump the aws group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1986 - fix(scanner/suse): skip new line in zyper -q lu

Pull Request - State: closed - Opened by MaineK00n 3 months ago

#1985 - chore(deps): bump github.com/samber/lo from 1.39.0 to 1.44.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1984 - chore(deps): bump github.com/aquasecurity/trivy from 0.52.2 to 0.53.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, go

#1983 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1982 - chore(deps): bump docker/build-push-action from 5 to 6

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1981 - chore(deps): bump goreleaser/goreleaser-action from 5 to 6

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, github_actions

#1980 - feat(contrib/trivy): support CVSS v4.0

Pull Request - State: closed - Opened by MaineK00n 3 months ago

#1979 - feat(cve/nvd): support CVSS v4.0

Pull Request - State: closed - Opened by MaineK00n 3 months ago

#1978 - feat(cve/mitre): support go-cve-dictionary:mitre

Pull Request - State: closed - Opened by MaineK00n 3 months ago - 3 comments

#1977 - openSUSE Leap 15.6: zypper -q lu Unknown format

Issue - State: closed - Opened by gdudas 3 months ago - 3 comments
Labels: bug

#1976 - chore(deps): bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1975 - vuls report fails when openSUSE Leap 15.6 host is added to config

Issue - State: closed - Opened by gdudas 3 months ago - 1 comment
Labels: bug

#1974 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, go

#1973 - chore(deps): update goval-dictionary

Pull Request - State: closed - Opened by MaineK00n 3 months ago

#1972 - fix(config/os): Fix EOL date of ubuntu 23.10

Pull Request - State: closed - Opened by shino 4 months ago

#1971 - feat: update EOL and Windows KB list

Pull Request - State: closed - Opened by MaineK00n 4 months ago

#1970 - chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1969 - chore(deps): bump github.com/aquasecurity/trivy from 0.52.1 to 0.52.2

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1968 - failed to collect modularitylabel

Issue - State: open - Opened by MaineK00n 4 months ago - 2 comments
Labels: bug

#1967 - refactor(report/s3): remove deprecated method for s3 endpoint

Pull Request - State: closed - Opened by MaineK00n 4 months ago

#1966 - style(log): saas s3 upload error log

Pull Request - State: closed - Opened by future-ryunosuketanai 4 months ago

#1965 - feat(config/os): add alpine 3.19, 3.20 EOL

Pull Request - State: closed - Opened by MaineK00n 4 months ago

#1964 - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#1963 - Support for Gentoo Linux

Issue - State: open - Opened by necrose99 4 months ago - 2 comments
Labels: enhancement

#1962 - chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1961 - chore(deps): bump github.com/aquasecurity/trivy from 0.51.4 to 0.52.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#1960 - chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.8.0 to 0.9.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1959 - chore(deps): bump golang.org/x/text from 0.15.0 to 0.16.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1958 - chore(deps): bump the aws group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1957 - fix(ci): Remove unused files to avoid disk full

Pull Request - State: closed - Opened by shino 4 months ago

#1956 - chore(deps): bump github.com/aquasecurity/trivy from 0.51.4 to 0.52.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dependencies, go

#1955 - chore(deps): bump docker/setup-buildx-action from 2 to 3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1954 - chore(deps): bump docker/setup-qemu-action from 2 to 3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1953 - chore(deps): bump docker/metadata-action from 4 to 5

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1952 - chore(deps): bump golangci/golangci-lint-action from 3 to 6

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1951 - chore(deps): bump github/codeql-action from 2 to 3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1950 - fix(redhat-based): collect running kernel packages

Pull Request - State: closed - Opened by MaineK00n 4 months ago

#1949 - chore(deps): bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1948 - chore(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, go

#1946 - chore(deps): bump actions/setup-go from 3 to 5

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#1938 - chore(deps): bump github.com/aquasecurity/trivy from 0.51.2 to 0.51.4

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#1935 - fix(debian,ubuntu): collect running kernel source package

Pull Request - State: closed - Opened by MaineK00n 4 months ago

#1933 - Multiple versions are detected in some packages on Debian-based distributions

Issue - State: closed - Opened by future-shun-ssk 4 months ago - 1 comment
Labels: bug

#1916 - Enhanced kernel package check with multiple versions installed

Issue - State: closed - Opened by future-ryunosuketanai 5 months ago - 1 comment
Labels: enhancement

#1907 - feat(detect/redhat): detect unpatched vulnerabilities with oval, stop using gost

Pull Request - State: closed - Opened by MaineK00n 5 months ago - 1 comment

#1766 - Modification of Alert Output Based on CISA's Known Exploited Vulnerabilities Catalog

Pull Request - State: closed - Opened by 1uf3 12 months ago - 1 comment

#1727 - CVE-2022-3602 false positive on openssl 3.0.9-1

Issue - State: open - Opened by wagde-orca about 1 year ago - 12 comments
Labels: bug

#1717 - refactor(amazon): version determination, parseInstalledPackagesLine

Pull Request - State: closed - Opened by MaineK00n about 1 year ago

#1705 - Support for Grafana or Kibana

Issue - State: open - Opened by UncleJ4ck about 1 year ago - 1 comment
Labels: enhancement

#1684 - chore(deps): bump github.com/vulsio/goval-dictionary from 0.9.2 to 0.9.3

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#1683 - chore(deps): bump github.com/aws/aws-sdk-go from 1.44.263 to 1.44.271

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#1682 - feat(ubuntu): Support Ubuntu 14.04 and 16.04 ESM

Pull Request - State: open - Opened by kotakanbe over 1 year ago