google/osv.dev issues and pull requests

#1632 - Replace last modified date with published date.

Pull Request - State: closed - Opened by hogo6002 about 1 year ago - 2 comments

#1631 - Sort versions

Pull Request - State: closed - Opened by hogo6002 about 1 year ago

#1630 - Bitnami CVE feed

Issue - State: closed - Opened by gongomgra about 1 year ago - 9 comments
Labels: datasource

#1629 - Opportunistically strip the repo name from fuzzy version enumeration

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1628 - Querybatch returns 400 when there is a malformed PURL in the batch

Issue - State: open - Opened by SouravJohar about 1 year ago
Labels: enhancement, api

#1627 - Improve layout of vulnerability subsection.

Pull Request - State: closed - Opened by hogo6002 about 1 year ago

#1626 - Update indexer

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1625 - Update golang:1.21-alpine Docker digest to 96634e5

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1624 - Improve browseability of OSV exports

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1623 - Correct path to local CVE list clone

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1622 - Increase failedJobsHistoryLimit to 3

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1621 - Refactor vulns.CVEIsDisputed to use a local clone and speed up execution

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1620 - In-progress commit to make consulting the CVE List faster

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 1 comment

#1619 - Improve the Python version enumeration code to better handle repos ending in a digit

Issue - State: closed - Opened by andrewpollock about 1 year ago
Labels: infra, worker, data quality

#1618 - Correct how vulns.AddPkgInfo aggregates ranges by repo

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1617 - Fix a typo in a tag

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1616 - Apply same output suppression from PR #1597 here too

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1615 - build local docker image when running make api-server-tests

Pull Request - State: closed - Opened by rjerrems about 1 year ago

#1614 - Store an empty ecosystem as a null in Datastore

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 2 comments

#1613 - Add a repo that redirects

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 1 comment

#1612 - Lock file maintenance appengine-backend

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1611 - Lock file maintenance api

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1610 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1609 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1608 - Show published date in osv.dev/list

Issue - State: closed - Opened by alex about 1 year ago - 3 comments
Labels: enhancement, good first issue, ui

#1607 - "ranges" is used both as a method name and as a variable name

Issue - State: closed - Opened by UVvirus about 1 year ago - 3 comments
Labels: good first issue, python, cleanup

#1606 - Method ranges() Returning List instead of set

Issue - State: closed - Opened by UVvirus about 1 year ago - 4 comments
Labels: good first issue, python, cleanup

#1605 - Resolve a last_affected version to a commit if no preexisting fixed commit

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1604 - Interim overlay support

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1603 - frontend: correct handling of GitLab commit and compare URLs

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1602 - General improvements to the cloud run frontend

Pull Request - State: closed - Opened by another-rex about 1 year ago - 2 comments

#1601 - Perform opportunistic repo name tag stripping case insensitively

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1600 - Avoid adding unnecessary duplicate zero-value introduced fields

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1599 - Ease fuzzy tag matching by removing repo name

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 3 comments

#1598 - Add missing static files to Cloud Run website, set minimum instance count to 1

Pull Request - State: closed - Opened by michaelkedar about 1 year ago

#1597 - Suppress rsync output the Right Way

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1596 - Update workflows

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1595 - Update module cloud.google.com/go/datastore to v1.14.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1594 - Update indexer

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1593 - Update docs

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1592 - Fix exception in error handling in nuget

Pull Request - State: closed - Opened by michaelkedar about 1 year ago

#1591 - Set API containerConcurrency to equal thread pool

Pull Request - State: closed - Opened by michaelkedar about 1 year ago

#1590 - Commit tag enumeration: better detection of relevant branch heads

Issue - State: open - Opened by oliverchang about 1 year ago
Labels: bug, infra, worker

#1589 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1588 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1587 - updating data sources

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 1 comment

#1586 - Attempt to fix renovate bot grouping

Pull Request - State: closed - Opened by another-rex about 1 year ago - 1 comment

#1585 - Specify short deploy length

Pull Request - State: closed - Opened by another-rex about 1 year ago

#1584 - Bump activesupport from 7.0.7 to 7.0.7.2 in /docs

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 5 comments
Labels: dependencies, ruby

#1583 - Fix the format name.

Pull Request - State: closed - Opened by hayleycd about 1 year ago - 1 comment

#1582 - Remove service account download from cloudbuild

Pull Request - State: closed - Opened by rjerrems about 1 year ago

#1581 - Fix typo in API documentation

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1580 - Update dependency google-cloud-ndb to v2.2.0

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1579 - Update dependency google-cloud-logging to v3.6.0 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1578 - Update dependency google-auth to v2.22.0 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1577 - Update pypa/gh-action-pypi-publish action to v1.8.10 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1576 - Update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.17.0 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1575 - Update dependency Flask to v2.3.3 - autoclosed

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1574 - Fix reference to service account instead of user

Pull Request - State: closed - Opened by rjerrems about 1 year ago

#1573 - Make endpoints use metadata service for credentials in cloud build

Pull Request - State: closed - Opened by rjerrems about 1 year ago

#1572 - Fix: Give cloud build service account access so we can remove esp-test

Pull Request - State: closed - Opened by rjerrems about 1 year ago - 3 comments

#1571 - Tolerate bugs with mixed range types

Pull Request - State: closed - Opened by andrewpollock about 1 year ago

#1570 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot about 1 year ago
Labels: dependencies

#1569 - Compute all transitive aliases for OSV entries

Issue - State: closed - Opened by fingeromer about 1 year ago - 5 comments
Labels: data quality

#1568 - Fix logic error with preferencing predetermined fix commits

Pull Request - State: closed - Opened by andrewpollock about 1 year ago - 1 comment

#1567 - Add 'labels' to terraform cloud run ignore changes

Pull Request - State: closed - Opened by michaelkedar about 1 year ago - 1 comment

#1566 - Reduce initial workers replicas to 1

Pull Request - State: closed - Opened by michaelkedar over 1 year ago

#1565 - Update module github.com/golang/glog to v1.1.2

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1564 - Update dependency werkzeug to v2.3.7

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1563 - Update golang.org/x/exp digest to d852ddb

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1562 - Update gaurav-nelson/github-action-markdown-link-check digest to 46e4421

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1561 - Mirror OSV.dev website on Cloud Run in staging instance

Pull Request - State: closed - Opened by michaelkedar over 1 year ago

#1560 - Don't set (and export) an empty packages field

Pull Request - State: closed - Opened by andrewpollock over 1 year ago - 1 comment

#1559 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1558 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1557 - Throw even more CPU at the problem

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1556 - Add a custom 404 page

Issue - State: closed - Opened by andrewpollock over 1 year ago - 5 comments
Labels: enhancement, ui, frontend

#1555 - Avoid an empty package field in the resulting OSV record

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1554 - Fix reference time for CVE 5 timestamps

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1553 - Correctly silence the rsync operations

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1552 - Ingest https://github.com/psf/advisory-database/tree/main/advisories

Issue - State: closed - Opened by oliverchang over 1 year ago - 19 comments
Labels: datasource

#1551 - frontend: Link to deps.dev for supported packages

Issue - State: closed - Opened by oliverchang over 1 year ago - 9 comments
Labels: frontend

#1550 - Cargo cult what the importer is doing (with a tweak) to get more computing power

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1549 - Standardise on the same version of the Go buildchain as the CI image

Pull Request - State: closed - Opened by andrewpollock over 1 year ago - 4 comments

#1548 - Use name 'withdrawn' instead of 'modified' for Vulnerability struct

Pull Request - State: closed - Opened by sethmlarson over 1 year ago - 2 comments

#1547 - Switch to a fork so the tags stay stable

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1546 - Improve CVE configuration parsing for CPEs

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1545 - Support the edge case of a very new CVE with no CPEs

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1544 - Use `gcloud storage` to accelerate GCS transfers and use more CPUs

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1543 - Increase deadline for combine-to-osv

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1542 - Make lint_and_format.sh more user friendly for first time contributors

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1541 - Bump commonmarker from 0.23.9 to 0.23.10 in /docs

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, ruby

#1540 - Update dependency google-cloud-secret-manager to v2.16.3

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1539 - Update golang:alpine Docker digest - autoclosed

Pull Request - State: closed - Opened by renovate-bot over 1 year ago
Labels: dependencies

#1538 - Exclude any AffectedVersions from the output

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1537 - Fix: Remove --privileged flag and run ESP as root in local dev

Pull Request - State: closed - Opened by rjerrems over 1 year ago

#1536 - Make the CVE consolidation hermetic to staging

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1535 - Make combine-to-osv more resilient and debug-friendly

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1534 - combine-to-osv expects an array of PackageInfo not a single struct

Pull Request - State: closed - Opened by andrewpollock over 1 year ago

#1533 - OSV4K: Java/Kotlin serialization library for OSV

Pull Request - State: closed - Opened by akuleshov7 over 1 year ago - 6 comments

GitHub / google/osv.dev issues and pull requests