ossf/package-analysis issues and pull requests

#1099 - Use .removesuffix of .rstrip when trying to import Python files.

Pull Request - State: closed - Opened by calebbrown 9 days ago

#1098 - Update deps for the Cloud Run Function loader.

Pull Request - State: closed - Opened by calebbrown 9 days ago

#1097 - Bump the parsing-minor-updates group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago
Labels: dependencies, javascript

#1096 - Bump the actions-minor-updates group across 1 directory with 7 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago
Labels: dependencies, github_actions

#1095 - Bump the gomod-minor-updates group across 1 directory with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago
Labels: dependencies, go

#1094 - Incorrectly stripping python path names

Issue - State: closed - Opened by Will-20 15 days ago - 1 comment

#1093 - package-analysis error during django analysis

Issue - State: open - Opened by r0075h3ll 18 days ago - 1 comment

#1092 - Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 21 days ago - 2 comments
Labels: dependencies, javascript

#1091 - Bump the actions-minor-updates group across 1 directory with 7 updates

Pull Request - State: closed - Opened by dependabot[bot] 21 days ago - 2 comments
Labels: dependencies, github_actions

#1090 - Bump Go dependencies to the latest versions.

Pull Request - State: closed - Opened by calebbrown about 1 month ago

#1089 - Rename deadline to the correct timeout so linting completes.

Pull Request - State: closed - Opened by calebbrown about 1 month ago

#1088 - Bump the gomod-minor-updates group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 2 comments
Labels: dependencies, go

#1087 - Bump cloud.google.com/go/bigquery from 1.62.0 to 1.65.0 in /function/loader in the loader-minor-updates group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 4 comments
Labels: dependencies, go

#1086 - Bump golang.org/x/crypto from 0.25.0 to 0.31.0 in /function/loader

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, go

#1085 - Bump golang.org/x/crypto from 0.27.0 to 0.31.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, go

#1084 - README instruction `make build_analysis_image` not valid anymore

Issue - State: open - Opened by dimakuv about 1 month ago

#1083 - Support for Other Ecosystems like packagist and crates.io?

Issue - State: open - Opened by Wapiti08 about 2 months ago

#1082 - Bump the gomod-minor-updates group across 1 directory with 7 updates

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, go

#1081 - Bump the actions-minor-updates group across 1 directory with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, github_actions

#1080 - Update README to use correct Makefile target name.

Pull Request - State: closed - Opened by mathew-horner 2 months ago

#1079 - Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1078 - Bump the gomod-minor-updates group with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, go

#1077 - Bump the actions-minor-updates group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, github_actions

#1076 - Bump cloud.google.com/go/bigquery from 1.62.0 to 1.64.0 in /function/loader in the loader-minor-updates group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, go

#1075 - Create run_analysis_batch.sh

Pull Request - State: open - Opened by Wapiti08 3 months ago

#1074 - Bump the gomod-minor-updates group across 1 directory with 9 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, go

#1073 - Bump the actions-minor-updates group across 1 directory with 4 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1072 - Bump cloud.google.com/go/bigquery from 1.62.0 to 1.63.1 in /function/loader in the loader-minor-updates group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, go

#1071 - Bump github/codeql-action from 2.13.4 to 3.26.12

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1071 - Bump github/codeql-action from 2.13.4 to 3.26.12

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1070 - Bump golangci/golangci-lint-action from 4.0.0 to 6.1.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1070 - Bump golangci/golangci-lint-action from 4.0.0 to 6.1.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1069 - Bump github/codeql-action from 2.13.4 to 3.26.10

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#1068 - Bump golangci/golangci-lint-action from 4.0.0 to 6.1.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#1067 - Bump the actions-minor-updates group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#1066 - Bump cloud.google.com/go/bigquery from 1.62.0 to 1.63.0 in /function/loader in the loader-minor-updates group

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#1065 - Bump Go to v1.23.1

Pull Request - State: closed - Opened by calebbrown 4 months ago

#1065 - Bump Go to v1.23.1

Pull Request - State: closed - Opened by calebbrown 4 months ago

#1064 - Update the perms to allow OSV scanning to work.

Pull Request - State: closed - Opened by calebbrown 4 months ago - 1 comment

#1064 - Update the perms to allow OSV scanning to work.

Pull Request - State: closed - Opened by calebbrown 4 months ago - 1 comment

#1063 - Bump the gomod-minor-updates group across 1 directory with 9 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dependencies, go

#1062 - Bump the actions-minor-updates group across 1 directory with 7 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, github_actions

#1061 - Bump the gomod-minor-updates group across 1 directory with 9 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, go

#1060 - Bump the parsing-minor-updates group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, javascript

#1059 - Bump cloud.google.com/go/bigquery from 1.59.1 to 1.62.0 in /function/loader in the loader-minor-updates group

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, go

#1058 - Bump the actions-minor-updates group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 3 comments
Labels: dependencies, github_actions

#1057 - Bump the gomod-minor-updates group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, go

#1056 - Bump the parsing-minor-updates group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, javascript

#1055 - enhancement: github-actions analysis

Issue - State: open - Opened by thepwagner 7 months ago

#1054 - golangci-lint: disable deprecated linters

Pull Request - State: closed - Opened by thepwagner 7 months ago

#1053 - Monitoring Data (with clear labels and malicious indicators) for Academic Research

Issue - State: closed - Opened by Wapiti08 8 months ago

#1052 - Bump the gomod-minor-updates group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies, go

#1051 - Bump the parsing-minor-updates group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies, javascript

#1050 - Bump the actions-minor-updates group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies, github_actions

#1049 - fix: word in queries.md

Pull Request - State: closed - Opened by Yao-Wen-Chang 8 months ago

#1048 - fix: word in queries.md

Pull Request - State: closed - Opened by Yao-Wen-Chang 8 months ago

#1047 - Error from scanning the package

Issue - State: open - Opened by Yao-Wen-Chang 9 months ago - 3 comments

#1046 - Bump cloud.google.com/go/bigquery from 1.59.1 to 1.61.0 in /function/loader in the loader-minor-updates group

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, go

#1045 - Bump the gomod-minor-updates group with 4 updates

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, go

#1044 - Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, javascript

#1043 - Bump the actions-minor-updates group with 4 updates

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, github_actions

#1042 - upgrade golang.org/x/net package to remediate vulnerability

Pull Request - State: closed - Opened by maxfisher-g 10 months ago

#1041 - Report a critical issue

Issue - State: closed - Opened by ya3raj 10 months ago - 1 comment

#1040 - Bump actions/dependency-review-action from 3.1.4 to 4.2.5

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, github_actions

#1039 - Bump the actions-minor-updates group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#1038 - Bump the loader-minor-updates group in /function/loader with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, go

#1037 - Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, javascript

#1036 - Bump the gomod-minor-updates group with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, go

#1035 - Implement mholt/archiver

Pull Request - State: open - Opened by gliptak 10 months ago - 5 comments

#1034 - Proposed legal & governance improvements for the OpenSSF

Issue - State: open - Opened by hythloda 10 months ago - 1 comment

#1033 - Rename ExtractTarGzFile to ExtractArchiveFile

Pull Request - State: closed - Opened by gliptak 10 months ago - 1 comment

#1032 - bump protobuf to non vulnerable version

Pull Request - State: closed - Opened by maxfisher-g 10 months ago - 2 comments

#1031 - Bump google.golang.org/protobuf from 1.32.0 to 1.33.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, go

#1030 - Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /function/loader

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, go

#1029 - Adding Technical Charter

Pull Request - State: open - Opened by redenmartinez 10 months ago - 4 comments

#1028 - Refactor docker/* targets in Makefile

Pull Request - State: closed - Opened by gliptak 11 months ago - 8 comments

#1027 - Bump GVisor to the latest release 20240212.

Pull Request - State: closed - Opened by calebbrown 11 months ago

#1026 - Update the K8S deb repo to the community repo.

Pull Request - State: closed - Opened by calebbrown 11 months ago

#1025 - Bump the loader-minor-updates group in /function/loader with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies, go

#1024 - Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 2 comments
Labels: dependencies, javascript

#1023 - Bump the gomod-minor-updates group with 8 updates

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, go

#1022 - Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies, github_actions

#1021 - Bump actions/dependency-review-action from 3.1.4 to 4.1.3

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, github_actions

#1020 - Bump the actions-minor-updates group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, github_actions

#1019 - Implement help in Makefile

Pull Request - State: closed - Opened by gliptak 11 months ago - 1 comment

#1018 - Add user-agents to http requests sent by Package Analysis

Pull Request - State: closed - Opened by calebbrown 11 months ago

#1017 - Point the new dynamic analysis loader at the real table.

Pull Request - State: closed - Opened by calebbrown 11 months ago

#1016 - Disable the currently failing crates.io test until it is fixed.

Pull Request - State: closed - Opened by calebbrown 11 months ago

#1015 - crates.io access is failing

Issue - State: closed - Opened by calebbrown 11 months ago - 1 comment

#1014 - Revert "Adjust the query to keep the destination rather than replace"

Pull Request - State: closed - Opened by calebbrown 11 months ago - 3 comments