quay/claircore issues and pull requests

#943 - libindex: fix broken benchmark

Pull Request - State: open - Opened by hdonnay over 1 year ago

#942 - java: expose matcher

Pull Request - State: open - Opened by RTann over 1 year ago

#941 - cicd: gating lints

Pull Request - State: open - Opened by hdonnay over 1 year ago - 2 comments

#940 - v1.5.1 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#939 - chore: Remove unused and badly named datastore testdata

Pull Request - State: closed - Opened by crozzy over 1 year ago

#938 - v1.5.0 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#937 - updater: Extend default updater time to 6 hours

Pull Request - State: closed - Opened by crozzy over 1 year ago - 1 comment
Labels: needs-changelog

#936 - build(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, go

#935 - build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#934 - integration: change test cache dir

Pull Request - State: open - Opened by hdonnay over 1 year ago

#933 - postgres: fix test names

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 1 comment

#932 - cicd: fix test invocation, print postgres logs

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#931 - rhel: Remove test updater

Pull Request - State: closed - Opened by crozzy over 1 year ago

#930 - build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, go

#929 - build(deps): bump github.com/prometheus/client_model from 0.3.0 to 0.4.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go

#928 - build(deps): bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go

#927 - build(deps): bump peter-evans/create-pull-request from 5.0.0 to 5.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions

#926 - chore: use non-containerized postgres and go

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#925 - chore: mailmap

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#924 - etc: make importfix script ignore deleted files

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 1 comment

#923 - Support wolfi / chainguard detection

Issue - State: open - Opened by jbergstroem over 1 year ago - 4 comments
Labels: triaged

#922 - osv: canonicalize ranges

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#921 - osv: Add osv UpdaterSet to the periodic test suite

Pull Request - State: closed - Opened by crozzy over 1 year ago

#920 - build(deps): bump modernc.org/sqlite from 1.22.0 to 1.22.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#919 - rhel: use CVSS score as Severity

Pull Request - State: open - Opened by RTann over 1 year ago - 4 comments

#918 - Build and publish github workflow didn't run for s390x

Issue - State: closed - Opened by modassarrana89 over 1 year ago - 1 comment

#917 - feature: added s390x support to golang base image

Pull Request - State: closed - Opened by ksdeekshith over 1 year ago

#916 - Update various images to be `ubi9` based

Issue - State: open - Opened by hdonnay over 1 year ago
Labels: good first issue, triaged

#915 - python: migrate data source to OSV

Pull Request - State: closed - Opened by daynewlee over 1 year ago - 1 comment

#914 - feature: added s390x support to golang base image

Pull Request - State: closed - Opened by ksdeekshith over 1 year ago - 2 comments

#913 - build(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#912 - build(deps): bump modernc.org/sqlite from 1.21.1 to 1.22.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#911 - indexer: Add index to manifest_index table to aid deletions

Pull Request - State: closed - Opened by crozzy over 1 year ago - 1 comment

#910 - build(deps): bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#909 - build(deps): bump github.com/rs/zerolog from 1.29.0 to 1.29.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, go

#908 - etc: add import helper

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 4 comments

#907 - v1.4.22 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#906 - Misc `vet` & `fmt` fixes

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#905 - v1.4.22 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#904 - bisect: enforce linux/amd64

Pull Request - State: closed - Opened by RTann over 1 year ago

#903 - python: migrate Python support to OSV

Pull Request - State: closed - Opened by daynewlee over 1 year ago - 1 comment

#902 - bisect tool update

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#901 - periodic: add additional search patterns

Pull Request - State: open - Opened by hdonnay over 1 year ago

#900 - build(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#899 - build(deps): bump golang.org/x/tools from 0.6.0 to 0.8.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#898 - build(deps): bump golang.org/x/crypto from 0.6.0 to 0.8.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#897 - build(deps): bump golang.org/x/text from 0.7.0 to 0.9.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, go

#896 - build(deps): bump peter-evans/create-pull-request from 4.2.4 to 5.0.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions

#895 - ctxlock: add tracing and profiling hooks

Pull Request - State: open - Opened by hdonnay over 1 year ago

#894 - build(deps): bump modernc.org/sqlite from 1.21.0 to 1.21.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, go

#893 - build(deps): bump peaceiris/actions-gh-pages from 3.9.2 to 3.9.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions

#892 - OSV maven parsing and maven CVE matching

Pull Request - State: closed - Opened by daynewlee over 1 year ago - 8 comments

#891 - OSV update

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 3 comments

#890 - java: added matcher and integration test

Pull Request - State: closed - Opened by daynewlee over 1 year ago

#889 - v1.4.21 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#888 - debian: use security tracker json instead of oval feeds

Pull Request - State: closed - Opened by RTann over 1 year ago - 3 comments
Labels: needs-changelog

#887 - rpm: handle bdb header weirdness

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 1 comment

#886 - Parse OSV maven data and complete java support

Pull Request - State: closed - Opened by daynewlee over 1 year ago - 1 comment

#885 - rpm: error reading native db: rpm: failed to parse header: region tag not found

Issue - State: closed - Opened by crozzy over 1 year ago

#884 - v1.4.20 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#883 - python: Rename files due to go get complaints

Pull Request - State: closed - Opened by crozzy over 1 year ago - 2 comments

#882 - tests: Rename testdata to .testdata

Pull Request - State: closed - Opened by crozzy over 1 year ago - 2 comments

#881 - integration: explicit locale in initdb(1)

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#879 - chore: do not assume challenge endpoint called token

Pull Request - State: closed - Opened by RTann over 1 year ago - 3 comments

#878 - v1.4.19 Changelog Bump

Pull Request - State: closed - Opened by github-actions[bot] over 1 year ago

#877 - build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, go

#876 - build(deps): bump actions/setup-go from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#875 - build(deps): bump peter-evans/create-pull-request from 4.2.3 to 4.2.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#874 - build(deps): bump actions/cache from 3.3.0 to 3.3.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#873 - error from debian dynamic distributions

Issue - State: closed - Opened by paulaldridge over 1 year ago - 5 comments

#872 - add java matcher

Pull Request - State: closed - Opened by daynewlee over 1 year ago

#871 - pep440: add leading zeroes tests

Pull Request - State: closed - Opened by RTann over 1 year ago

#870 - linux: move package to root

Pull Request - State: closed - Opened by crozzy over 1 year ago - 1 comment

#869 - wip: rpm: consult dnf database for repository information

Pull Request - State: open - Opened by hdonnay over 1 year ago

#868 - etc: add image debugging script

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 1 comment

#867 - libindex: Change location of layerScanner construction

Pull Request - State: closed - Opened by crozzy over 1 year ago

#866 - build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, go

#865 - build(deps): bump actions/cache from 3.2.6 to 3.3.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#863 - chore: delete airgap options

Pull Request - State: closed - Opened by RTann over 1 year ago - 1 comment

#862 - docs: contributing guidelines

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#861 - all: audit `tmp.NewFile` use

Pull Request - State: closed - Opened by hdonnay over 1 year ago

#856 - jar: improve name heuristic

Pull Request - State: closed - Opened by daynewlee over 1 year ago - 7 comments

#854 - datastore: Consolidate all IndexStore methods

Pull Request - State: open - Opened by crozzy over 1 year ago

#851 - all: update generate directives with run commands

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 4 comments

#844 - suse: change security tracker URL

Pull Request - State: open - Opened by astebenkova over 1 year ago - 9 comments

#841 - dpkg: consider `Status` field

Pull Request - State: closed - Opened by hdonnay over 1 year ago - 5 comments

#840 - java: support Jenkins plugin archives

Pull Request - State: closed - Opened by RTann over 1 year ago - 4 comments

#836 - ruby: support gemspec

Pull Request - State: closed - Opened by RTann almost 2 years ago - 4 comments

#827 - python: consider path for some packages

Pull Request - State: closed - Opened by hdonnay almost 2 years ago

#809 - False positives for packages installed from RH EUS streams

Issue - State: open - Opened by bainsy88 almost 2 years ago - 8 comments
Labels: triaged

#758 - dpkg: Add distroless scanner

Pull Request - State: closed - Opened by crozzy almost 2 years ago - 2 comments

#755 - spool: a turbocharged `pkg/tmp`

Pull Request - State: open - Opened by hdonnay almost 2 years ago

#750 - Whiteout support

Pull Request - State: closed - Opened by crozzy almost 2 years ago - 2 comments
Labels: needs-changelog

#720 - sqlite: fs.FS support via vfs

Pull Request - State: open - Opened by hdonnay about 2 years ago - 2 comments

#701 - gobin: enable matching machinery

Pull Request - State: open - Opened by hdonnay about 2 years ago

#672 - rpm: remote rpm packageScanner from rpm ecosystem

Pull Request - State: open - Opened by crozzy about 2 years ago - 1 comment
Labels: to-discuss

#669 - Seekable tarfs

Pull Request - State: open - Opened by hdonnay about 2 years ago - 6 comments

#646 - Restructuring

Pull Request - State: closed - Opened by crozzy over 2 years ago

#645 - URL documentation helper

Pull Request - State: closed - Opened by hdonnay over 2 years ago - 3 comments

#626 - rhel: Include cve defs when parsing through rhel oval feeds

Pull Request - State: open - Opened by crozzy over 2 years ago - 5 comments
Labels: hold, to-discuss

GitHub / quay/claircore issues and pull requests