google/osv.dev issues and pull requests

#2278 - Fix integration tests

Pull Request - State: closed - Opened by andrewpollock 5 months ago

#2277 - Add a link to dep.dev for the supported ecosystems

Pull Request - State: closed - Opened by zahraaalizadeh 5 months ago

#2276 - API: query vulnerabilities

Issue - State: closed - Opened by pxp928 5 months ago - 1 comment

#2275 - Lock file maintenance api

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2274 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2273 - Update docs

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies, rebase

#2272 - Update workflows

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2271 - Update Chainguard source

Pull Request - State: closed - Opened by oliverchang 6 months ago - 3 comments

#2270 - Replace pipenv with a better dependency management tool

Issue - State: open - Opened by hogo6002 6 months ago - 5 comments
Labels: enhancement

#2269 - Remove App Engine from Terraform

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2268 - Update material web components to 1.0

Issue - State: closed - Opened by another-rex 6 months ago
Labels: dependencies, frontend

#2267 - Add Terraform version to CONTRIBUTING.md

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2266 - Disable failed tests to unblock deployment

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2265 - A smarter osv.dev website caching implementation

Pull Request - State: closed - Opened by another-rex 6 months ago

#2264 - Explicitly manage datastore in terraform

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2263 - Update terraform version

Pull Request - State: closed - Opened by michaelkedar 6 months ago - 1 comment

#2262 - Add severity column to vulnerability list

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago - 9 comments

#2261 - Update rest of pipenv versions to 2023.12.1

Pull Request - State: closed - Opened by another-rex 6 months ago

#2258 - Handle negative page for vulnerability list page

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago

#2254 - Calculate and display the CVSS base score

Issue - State: open - Opened by andrewpollock 6 months ago
Labels: enhancement, good first issue, ui, frontend

#2244 - Lock file maintenance workers

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2236 - Bump PyPI setup.py version.

Pull Request - State: closed - Opened by oliverchang 6 months ago

#2235 - Improve the UX of failed vulnerability retrieval by the API

Issue - State: open - Opened by andrewpollock 6 months ago
Labels: documentation, api

#2234 - Add dynamic sitemap generation route and caching mechanism

Pull Request - State: closed - Opened by zahraaalizadeh 6 months ago - 1 comment

#2233 - Further validate repos by only accepting ones with tags

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2232 - Bisection should not produce zero-length commit ranges

Issue - State: open - Opened by andrewpollock 6 months ago - 1 comment
Labels: bug, worker

#2227 - Add suggest improvement button to vulnerability page

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago - 13 comments

#2223 - Collapse fields on vulnerability page when it's too long

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago - 1 comment

#2222 - fix: update the OSS-Fuzz denylist

Pull Request - State: closed - Opened by evverx 6 months ago - 12 comments

#2221 - Issue 1013/reduce website latency/2

Pull Request - State: closed - Opened by zahraaalizadeh 6 months ago

#2220 - nvd-cve-osv: OpenSSL versions do not normalize correctly

Issue - State: open - Opened by andrewpollock 6 months ago - 1 comment

#2219 - Update instructions for a self-demo

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2218 - chore(deps-dev): Bump rexml from 3.2.6 to 3.2.8 in /docs in the bundler group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, ruby

#2217 - Fix 404 error when navigating away from blog page

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago - 1 comment

#2216 - Handle very long fields on vulnerabilities pages

Issue - State: closed - Opened by oliverchang 6 months ago - 1 comment
Labels: enhancement, ui, frontend

#2215 - Enable GCS deletion job in Production

Pull Request - State: closed - Opened by andrewpollock 6 months ago - 1 comment

#2214 - Support a conversion/extraction corner case as usable

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2213 - Fix integration tests withdrawn CVEs

Pull Request - State: closed - Opened by andrewpollock 6 months ago - 2 comments

#2212 - Utility for listing the Bug IDs for a source in Datastore

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2211 - Migrate website traffic entirely to Cloud Run

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2210 - Bump website cloud run traffic again

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2209 - Improve the usability when operating on a larger number of records

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2208 - Bump website cloud run traffic

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2207 - Create get vulnerability details API

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago - 6 comments

#2206 - Start forwarding web traffic to cloud run

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2205 - Relock Gemfile.lock

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2204 - chore(deps-dev): Bump nokogiri from 1.16.2 to 1.16.5 in /docs in the bundler group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 3 comments
Labels: dependencies, ruby

#2203 - Add terraform path to renovate config

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2202 - bump terraform google provider version

Pull Request - State: closed - Opened by michaelkedar 6 months ago - 2 comments

#2201 - Disable boringssl OSS-Fuzz -> OSV import

Pull Request - State: closed - Opened by oliverchang 6 months ago - 1 comment

#2200 - Do not process OSS Fuzz in delete-only mode

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2199 - Normalize GitHub repos to lowercase

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2198 - Fix collapsed packages when navigate to vulnerability page

Pull Request - State: closed - Opened by ZhangChen199102 6 months ago

#2197 - Data quality issue with GHSA-4wrc-f8pq-fpqp

Issue - State: closed - Opened by wrngrn 6 months ago - 2 comments
Labels: data quality

#2196 - Fix modified time of nvd part entries

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2195 - Data quality issue CVE-2023-24163

Issue - State: closed - Opened by achibear 6 months ago - 2 comments
Labels: data quality

#2194 - Prepare second importer cronjob for production

Pull Request - State: closed - Opened by andrewpollock 6 months ago - 1 comment

#2193 - Document the properties of a high quality OSV record

Pull Request - State: open - Opened by andrewpollock 6 months ago - 1 comment

#2192 - Add automation to assist with scalable and efficient FAQ awareness

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2191 - OSV.dev downstream users have a clearly defined user journey to make corrections to OSV records served by OSV.dev with minimal overhead by all parties

Issue - State: open - Opened by andrewpollock 6 months ago

#2190 - OSV.dev downstream users have a way to reason about records that are absent from OSV.dev because of failure to meet the minimum quality bar

Issue - State: open - Opened by andrewpollock 6 months ago

#2189 - OSV record providers have a machine-readable way to reason about existing published records that do not meet this quality bar

Issue - State: open - Opened by andrewpollock 6 months ago - 1 comment

#2188 - The minimum quality bar is sustainably enforced by OSV.dev

Issue - State: open - Opened by andrewpollock 6 months ago

#2187 - Tooling exists for OSV record creators to validate that they meet the minimum quality bar at record creation time

Issue - State: open - Opened by andrewpollock 6 months ago - 4 comments

#2186 - There is a human readable authoritative definition of what the minimum quality bar looks like for an an OSV record that is acceptable for import by OSV.dev

Issue - State: open - Opened by andrewpollock 6 months ago

#2185 - Retry all remaining GCS operations that may intermittently fail

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2184 - Navigating away from a blog post attempts to get the blog's images from the new page

Issue - State: open - Opened by michaelkedar 6 months ago
Labels: bug, frontend

#2183 - CVEs getting reported for git hash, which have been resolved

Issue - State: closed - Opened by yashrsharma44 6 months ago - 3 comments
Labels: data quality

#2182 - Search for existing commits case-insensitively

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2181 - Bump actions in publish-to-pypi.yaml

Pull Request - State: open - Opened by ScottBrenner 6 months ago

#2180 - Configure GCLB in terraform

Pull Request - State: closed - Opened by michaelkedar 6 months ago

#2179 - Update Go to 1.22.3

Pull Request - State: closed - Opened by cuixq 6 months ago - 1 comment

#2178 - Disable automatic OSS-Fuzz -> OSV import for BoringSSL

Issue - State: closed - Opened by davidben 6 months ago

#2177 - Withdrawing OSV reports is too heavyweight

Issue - State: open - Opened by davidben 6 months ago - 5 comments

#2176 - Request OSS-Fuzz project owner approval before importing OSS-Fuzz reports

Issue - State: open - Opened by davidben 6 months ago - 14 comments

#2175 - Bump npm version to v8.19.4

Pull Request - State: closed - Opened by another-rex 6 months ago

#2174 - Update Go version to 1.22.2

Pull Request - State: closed - Opened by cuixq 6 months ago - 1 comment

#2173 - tools/datafix: update idna in Pipfile.lock

Pull Request - State: closed - Opened by cuixq 6 months ago

#2172 - Lock file maintenance docs

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2171 - chore(deps): lock file maintenance appengine-frontend

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2170 - Lock file maintenance appengine-backend

Pull Request - State: closed - Opened by renovate-bot 6 months ago - 1 comment
Labels: dependencies

#2169 - Lock file maintenance

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2168 - Enable Debian combine-to-osv on prod

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2167 - Add parallel exporter

Pull Request - State: closed - Opened by another-rex 6 months ago - 1 comment

#2166 - Return early when there's nothing to delete

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2165 - Relaunch "Update last modified time of combine-to-osv entries"

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2164 - Sort the AffectedCommits

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2163 - Update renovate.json

Pull Request - State: closed - Opened by another-rex 6 months ago - 1 comment

#2162 - Revert "Update last modified time of combine-to-osv entries"

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2161 - Fix threshold type bug

Pull Request - State: closed - Opened by andrewpollock 6 months ago

#2160 - chore(deps): update dependency werkzeug to v3.0.3 [security]

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2159 - chore(deps): update dependency jinja2 to v3.1.4 [security]

Pull Request - State: closed - Opened by renovate-bot 6 months ago
Labels: dependencies

#2158 - Update last modified time of combine-to-osv entries

Pull Request - State: closed - Opened by hogo6002 6 months ago

#2157 - chore(deps): lock file maintenance api

Pull Request - State: closed - Opened by renovate-bot 7 months ago
Labels: dependencies

#2156 - chore(deps): lock file maintenance

Pull Request - State: closed - Opened by renovate-bot 7 months ago
Labels: dependencies

#2153 - Bioconductor enumeration code is fault-intolerant

Issue - State: open - Opened by andrewpollock 7 months ago - 6 comments

#2152 - Support easy access to the json version of a vulnerability

Issue - State: closed - Opened by G-Rath 7 months ago - 5 comments
Labels: enhancement, frontend

#2151 - Add Cache-Control to response

Pull Request - State: closed - Opened by zahraaalizadeh 7 months ago - 4 comments

#2150 - Fix the padding of the background image

Pull Request - State: closed - Opened by zahraaalizadeh 7 months ago - 1 comment

#2149 - Fix missed website Cloud Deploy change

Pull Request - State: closed - Opened by michaelkedar 7 months ago

GitHub / google/osv.dev issues and pull requests