google/osv-scanner issues and pull requests

#598 - Gate extended tests

Pull Request - State: closed - Opened by another-rex about 1 year ago - 3 comments

#597 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#596 - chore(deps): update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#595 - Problemas con la instalacion

Issue - State: closed - Opened by JuanDavRH about 1 year ago - 3 comments
Labels: question

#594 - Make scheduled and PR scanning only scan the relevant files and ignore fixtures

Pull Request - State: closed - Opened by another-rex about 1 year ago

#593 - Update docs to add in saving to file option

Pull Request - State: closed - Opened by another-rex about 1 year ago - 2 comments

#592 - chore(deps): update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#591 - chore(deps): update golang:alpine docker digest to 926f7f7

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#590 - fix: use the first version when a dependency is listed multiple times in `pom.xml` files

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 2 comments

#589 - Extract multiple versions of the same package from pom.xml

Issue - State: closed - Opened by alowayed about 1 year ago - 4 comments

#588 - NPM aliased packages are not handled correctly

Issue - State: closed - Opened by michaelkedar about 1 year ago - 1 comment
Labels: bug, good first issue

#587 - Clarify in the docs actions will fail when vulns are found

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#586 - Change branch back in github action

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#585 - chore(deps): Bump golang.org/x/net from 0.16.0 to 0.17.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, go

#584 - Fix permissions and attempt "Download Artifact" option to allow custom lockfiles

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#583 - Update deps and fix tests

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#582 - Small doc adjustments for GitHub Actions

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 1 comment

#581 - Scan submodules too.

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 6 comments

#580 - chore(deps): update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#579 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#578 - fix(deps): update osv-scanner minor

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#577 - chore(deps): update golang:alpine docker digest to a76f153

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#576 - fix: support versions with build metadata in `yarn.lock` files

Pull Request - State: closed - Opened by G-Rath about 1 year ago

#575 - Improve documentation for github actions

Pull Request - State: closed - Opened by another-rex about 1 year ago - 6 comments

#574 - Error determining version of yarn dependency with "+git" in version

Issue - State: closed - Opened by spencerschrock about 1 year ago - 4 comments
Labels: bug

#573 - Allow release scanning to upload SARIF file.

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#572 - Fix goreleaser and update changelog

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#571 - 1.4.1 release and changelog

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#570 - Improve osv-scanner --help documentation

Issue - State: open - Opened by another-rex about 1 year ago - 2 comments
Labels: documentation, backlog

#569 - Add additional tests for git scanning, and markdown format

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#568 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#567 - chore(deps): update github/codeql-action action to v2.21.9

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#566 - chore(deps): update golang:alpine docker digest to 4bc6541

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#565 - chore(deps): update alpine:3.18 docker digest to eece025

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#564 - ci: use `.go-version` file

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 1 comment

#563 - ci: ensure that `actions/checkout` is pinned

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 1 comment

#562 - ci: don't fetch the whole repository history when its not needed

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 1 comment

#561 - Block release on vuln scan

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#560 - ci: run tests on macos and in parallel when releasing

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 1 comment

#559 - SARIF with fixed version

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#558 - test: use `cmp.Diff` for comparing output

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 3 comments

#557 - Add new ecosystems, and a slice containing all of them.

Pull Request - State: closed - Opened by calebbrown about 1 year ago - 1 comment

#556 - test: compare expected with actual rather than the other way around

Pull Request - State: closed - Opened by G-Rath about 1 year ago

#555 - chore: move scripts into the `scripts` directory

Pull Request - State: closed - Opened by G-Rath about 1 year ago

#554 - ci: combine lint and test workflows

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 1 comment

#553 - ci: run tests on Windows

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 4 comments

#552 - Add custom scan arguments

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#551 - SARIF: Take uncalled vulnerabilities into account

Issue - State: open - Opened by oliverchang about 1 year ago - 2 comments
Labels: enhancement, backlog

#550 - CI/CD integration guide

Issue - State: open - Opened by andrewpollock about 1 year ago - 2 comments
Labels: documentation, enhancement, stale

#549 - Is there a solution for integrating data detection with Jenkins?

Issue - State: closed - Opened by FuNianTongXue about 1 year ago - 3 comments
Labels: question, stale

#548 - SARIF: add guidance on remediation

Issue - State: open - Opened by oliverchang about 1 year ago - 2 comments
Labels: enhancement, backlog

#547 - SARIF output fixes.

Pull Request - State: closed - Opened by oliverchang about 1 year ago - 6 comments

#546 - Minor readme update

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#545 - chore(deps): lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 2 comments
Labels: dependencies

#544 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#543 - Fix action naming and scheduled scan parameters

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#542 - Attempt at multiline action

Pull Request - State: closed - Opened by another-rex about 1 year ago - 2 comments

#541 - Action docs

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 5 comments

#540 - chore(deps): update workflows (major)

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#539 - fix(deps): update osv-scanner minor

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#538 - chore(deps): update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#537 - Update experimental.md (#536)

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 2 comments

#536 - Update experimental.md

Pull Request - State: closed - Opened by hayleycd about 1 year ago

#535 - CyclonDX SBOM vulnerabilities not found

Issue - State: open - Opened by dtrussel about 1 year ago - 7 comments
Labels: backlog

#534 - Update SARIF format

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#533 - Fix issue in the changelog

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#532 - 1.4.0 changelog and docs

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#531 - Better support for project inheritance in Maven/Java (pom.xml)

Issue - State: closed - Opened by cuixq about 1 year ago - 1 comment
Labels: enhancement

#530 - chore(deps): update dependency jekyll-feed to [renamed]

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 4 comments
Labels: dependencies

#529 - chore(deps): update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#528 - fix(deps): update osv-scanner minor

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#527 - chore(deps): update golang:alpine docker digest to 96634e5

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#526 - Fix result scanning

Pull Request - State: closed - Opened by another-rex about 1 year ago

#525 - ci: change how coverage is collected

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 2 comments

#524 - test: add cases for extra coverage

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 2 comments

#523 - Update test results to pass new test

Pull Request - State: closed - Opened by another-rex about 1 year ago

#522 - Correctly use matchFileNames in renovate.json

Pull Request - State: closed - Opened by another-rex about 1 year ago

#521 - chore(deps): update slsa-framework/slsa-github-generator action to v1.9.0 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#520 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago - 1 comment
Labels: dependencies

#519 - chore(deps): update github/codeql-action action to v2.21.5 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#518 - chore(deps): update docker/setup-buildx-action digest to 885d146 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#517 - Adding Offline info

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 5 comments

#516 - Document GitHub actions

Issue - State: closed - Opened by oliverchang about 1 year ago - 4 comments
Labels: documentation

#515 - Document offline mode

Issue - State: closed - Opened by oliverchang about 1 year ago
Labels: documentation

#514 - Revert breaking change in `osv.go`

Pull Request - State: closed - Opened by another-rex about 1 year ago

#513 - Stabilize go call analysis and make it default behavior

Issue - State: closed - Opened by another-rex about 1 year ago - 7 comments

#512 - chore: capture coverage and upload it to codecov

Pull Request - State: closed - Opened by G-Rath about 1 year ago - 2 comments

#511 - `osv` package should not depend on `lockfile` package

Issue - State: open - Opened by another-rex about 1 year ago - 1 comment
Labels: V2 Wishlist

#510 - Refactor models

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#509 - chore(deps): update goreleaser/goreleaser-action action to v4.4.0 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#508 - chore(deps): update dependency jekyll-feed to v0.17.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#507 - chore(deps): update actions/checkout action to v3.6.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#506 - fix(deps): update osv-scanner minor

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#505 - Add osv output lockfile + refactor

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#504 - Update renovate.json

Pull Request - State: closed - Opened by another-rex about 1 year ago

#503 - chore(deps-dev): Bump activesupport from 7.0.7 to 7.0.7.2 in /docs

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, ruby

#502 - Update contributing docs

Pull Request - State: closed - Opened by hayleycd about 1 year ago

#501 - License checker feature

Pull Request - State: closed - Opened by josieang about 1 year ago - 3 comments

#500 - Add fixtures go to renovate bot ignore

Pull Request - State: closed - Opened by another-rex about 1 year ago

#499 - chore(deps): update golangci/golangci-lint-action action to v3.7.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

GitHub / google/osv-scanner issues and pull requests