trailofbits/abi3audit issues and pull requests

#106 - workflows/release: split sign job, harden permissions

Pull Request - State: closed - Opened by woodruffw 7 months ago
Labels: C:cicd

#105 - workflows/release: refactor into separate steps

Pull Request - State: closed - Opened by woodruffw 7 months ago

#104 - Trusted Publishing — split the jobs?

Issue - State: closed - Opened by webknjaz 7 months ago - 5 comments
Labels: enhancement, C:cicd

#103 - _object: lower warning to debug

Pull Request - State: closed - Opened by woodruffw 7 months ago

#102 - build(deps): bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#101 - Minimum ABI warning

Issue - State: closed - Opened by wsfulton 7 months ago - 5 comments

#100 - Add --summary and be more quiet by default

Pull Request - State: closed - Opened by wsfulton 7 months ago - 1 comment

#99 - _object: handle STB_GNU_UNIQUE

Pull Request - State: closed - Opened by woodruffw 7 months ago
Labels: enhancement

#98 - ELF: Handle `STB_GNU_UNIQUE`

Issue - State: closed - Opened by woodruffw 7 months ago - 1 comment

#97 - abi3audit crashes on windows-latest (Windows Server 2022) in Github Actions

Issue - State: closed - Opened by sdimovv 7 months ago - 3 comments

#96 - _object: skip unknown ELF visibilities

Pull Request - State: closed - Opened by woodruffw 7 months ago

#95 - pyproject: fix abi3info dep

Pull Request - State: closed - Opened by woodruffw 7 months ago

#94 - assert in _one_object starting in version 0.0.11

Issue - State: closed - Opened by wsfulton 7 months ago - 9 comments

#93 - Support globs on Windows

Pull Request - State: closed - Opened by woodruffw 7 months ago - 1 comment
Labels: enhancement

#92 - [Feature request] Support globs on Windows

Issue - State: closed - Opened by davidelahoz 8 months ago - 13 comments
Labels: enhancement, plat:windows

#91 - build(deps): update requests requirement from <2.32.0,>=2.28.1 to >=2.28.1,<2.33.0

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, python

#90 - fix: Create venv in configured directory

Pull Request - State: closed - Opened by nicholasjng 9 months ago

#89 - Get visibilities from shared objects to use them in filtering

Pull Request - State: closed - Opened by nicholasjng 10 months ago - 12 comments

#88 - build(deps-dev): update packaging requirement from <24.0,>=21.3 to >=21.3,<25.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, python

#87 - Add Py_XDECREF to new allowed symbol list

Pull Request - State: closed - Opened by nicholasjng 10 months ago - 2 comments

#86 - CI, Makefile: cleanup

Pull Request - State: closed - Opened by woodruffw 10 months ago

#85 - Reduce FPs when handling `static inline` functions

Issue - State: closed - Opened by woodruffw 11 months ago - 7 comments
Labels: bug

#84 - lint: update `ruff` config, re-run format

Pull Request - State: closed - Opened by woodruffw 11 months ago

#83 - (Question) Categorizing a Py_XDECREF ABI violation report

Issue - State: closed - Opened by nicholasjng 11 months ago - 4 comments

#82 - Potential false positive (compliant but flagged as non-compliant)

Issue - State: closed - Opened by HendersonSC 11 months ago - 7 comments

#81 - build(deps-dev): update requests-cache requirement from <1.2.0,>=0.9.6 to >=0.9.6,<1.3.0

Pull Request - State: closed - Opened by dependabot[bot] 12 months ago
Labels: dependencies, python

#80 - build(deps): bump sigstore/gh-action-sigstore-python from 2.1.0 to 2.1.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, github_actions

#79 - build(deps): bump actions/setup-python from 4 to 5

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, github_actions

#78 - build(deps-dev): update rich requirement from <13.7.0,>=12.5.1 to >=12.5.1,<13.8.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, python

#77 - Fix linting

Pull Request - State: closed - Opened by woodruffw over 1 year ago

#76 - build(deps): bump sigstore/gh-action-sigstore-python from 1.2.3 to 2.1.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#75 - build(deps-dev): update rich requirement from <13.5.0,>=12.5.1 to >=12.5.1,<13.7.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, python

#74 - build(deps): bump actions/checkout from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#73 - build(deps): bump sigstore/gh-action-sigstore-python from 1.2.3 to 2.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions

#72 - build(deps-dev): update rich requirement from <13.5.0,>=12.5.1 to >=12.5.1,<13.6.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, python

#71 - build(deps-dev): update requests-cache requirement from <1.1.0,>=0.9.6 to >=0.9.6,<1.2.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, python

#70 - build(deps-dev): update rich requirement from <13.4.0,>=12.5.1 to >=12.5.1,<13.5.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, python

#69 - dependabot: weekly updates

Pull Request - State: closed - Opened by woodruffw over 1 year ago
Labels: C:cicd

#68 - build(deps): bump pypa/gh-action-pip-audit from 1.0.7 to 1.0.8

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#67 - build(deps-dev): update requests requirement from <2.31.0,>=2.28.1 to >=2.28.1,<2.32.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, python

#66 - build(deps): bump trailofbits/.github from 0.1.2 to 0.1.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#65 - build(deps): bump trailofbits/.github from 0.1.1 to 0.1.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#64 - build(deps-dev): update requests requirement from <2.30.0,>=2.28.1 to >=2.28.1,<2.31.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, python

#63 - build(deps): bump trailofbits/.github from 0.0.4 to 0.1.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, github_actions

#62 - build(deps): bump pypa/gh-action-pip-audit from 1.0.6 to 1.0.7

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#61 - build(deps-dev): update requests requirement from ~=2.28.1 to >=2.28.1,<2.30.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, python

#60 - build(deps): bump sigstore/gh-action-sigstore-python from 1.2.2 to 1.2.3

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#59 - build(deps): bump sigstore/gh-action-sigstore-python from 1.2.1 to 1.2.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#58 - build(deps): bump pypa/gh-action-pypi-publish from 1.7.1 to 1.8.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, github_actions

#57 - CODEOWNERS: add owners

Pull Request - State: closed - Opened by woodruffw almost 2 years ago

#56 - build(deps): bump pypa/gh-action-pypi-publish from 1.6.4 to 1.7.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#55 - Inlined functions from CPython API

Issue - State: closed - Opened by karlotness almost 2 years ago - 3 comments

#54 - build(deps-dev): update requests-cache requirement from ~=0.9.6 to >=0.9.6,<1.1.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, python

#53 - build(deps): bump pypa/gh-action-pip-audit from 1.0.5 to 1.0.6

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#52 - build(deps): bump trailofbits/.github from 0.0.4 to 0.1.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, github_actions

#51 - build(deps): bump sigstore/gh-action-sigstore-python from 1.1.0 to 1.2.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#50 - build(deps): bump sigstore/gh-action-sigstore-python from 1.0.0 to 1.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#49 - Cleanup, best practices

Pull Request - State: closed - Opened by woodruffw about 2 years ago

#48 - build(deps-dev): update rich requirement from <13.3.0,>=12.5.1 to >=12.5.1,<13.4.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, python

#47 - Make abi3audit python 3.8 compatible

Pull Request - State: closed - Opened by ret2libc about 2 years ago - 3 comments

#46 - build(deps-dev): update rich requirement from <13.2.0,>=12.5.1 to >=12.5.1,<13.3.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, python

#45 - build(deps-dev): update rich requirement from <13.1.0,>=12.5.1 to >=12.5.1,<13.2.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, python

#44 - build(deps): bump sigstore/gh-action-sigstore-python from 0.3.0 to 1.0.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#43 - build(deps): bump sigstore/gh-action-sigstore-python from 0.2.0 to 0.3.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#42 - build(deps): bump pypa/gh-action-pip-audit from 1.0.4 to 1.0.5

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#41 - build(deps-dev): update packaging requirement from <23.0,>=21.3 to >=21.3,<24.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, python

#40 - build(deps-dev): update rich requirement from <12.7.0,>=12.5.1 to >=12.5.1,<13.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies, python

#39 - build(deps): bump pypa/gh-action-pip-audit from 1.0.2 to 1.0.4

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#38 - build(deps): bump pypa/gh-action-pip-audit from 1.0.2 to 1.0.3

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies, github_actions

#37 - pip-audit: local audit only

Pull Request - State: closed - Opened by woodruffw about 2 years ago

#36 - build(deps): bump sigstore/gh-action-sigstore-python from 0.1.0 to 0.2.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#35 - treewide: replace flake8 with ruff

Pull Request - State: closed - Opened by woodruffw about 2 years ago

#34 - Support Conda-style packaging?

Issue - State: open - Opened by woodruffw about 2 years ago - 1 comment
Labels: C:core

#33 - add `--assume-minimum-abi3` CLI flag

Pull Request - State: closed - Opened by jaimergp about 2 years ago - 5 comments

#32 - Question: Non-wheel audits

Issue - State: closed - Opened by jaimergp about 2 years ago - 4 comments

#31 - Add an option not to fail on version mismatch

Issue - State: closed - Opened by mayeut about 2 years ago - 1 comment

#30 - build(deps-dev): update packaging requirement from ~=21.3 to >=21.3,<23.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies, python

#29 - build(deps): bump pypa/gh-action-pip-audit from 1.0.1 to 1.0.2

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#28 - build(deps): bump pypa/gh-action-pypi-publish from 1.6.1 to 1.6.4

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies, github_actions

#27 - build(deps): bump pypa/gh-action-pypi-publish from 1.5.2 to 1.6.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#26 - build(deps): bump pypa/gh-action-pypi-publish from 1.5.1 to 1.5.2

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#25 - build(deps): bump sigstore/gh-action-sigstore-python from 0.0.11 to 0.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, github_actions

#24 - _cli: exit with nonzero if any individual audit step fails

Pull Request - State: closed - Opened by woodruffw about 2 years ago

#23 - Use exit code to communicate failure

Issue - State: closed - Opened by hauntsaninja about 2 years ago - 2 comments
Labels: bug, C:cli

#22 - `abi3audit` crashes on a numpy manylinux2014 wheel

Issue - State: closed - Opened by rgommers about 2 years ago - 4 comments
Labels: bug

#21 - workflows/ci: add Python 3.11 to test matrix

Pull Request - State: closed - Opened by woodruffw over 2 years ago

#20 - build(deps): bump sigstore/gh-action-sigstore-python from 0.0.10 to 0.0.11

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies, github_actions

#19 - build(deps): bump pypa/gh-action-pip-audit from 1.0.0 to 1.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, github_actions

#18 - build(deps-dev): update rich requirement from ~=12.5.1 to >=12.5.1,<12.7.0

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, python

#17 - build(deps): bump sigstore/gh-action-sigstore-python from 0.0.9 to 0.0.10

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, github_actions

#16 - _object: filter non-external symbols in dylibs

Pull Request - State: closed - Opened by woodruffw over 2 years ago
Labels: C:core

#15 - workflows: add pip-audit

Pull Request - State: closed - Opened by woodruffw over 2 years ago
Labels: C:cicd

#14 - Parallelize auditing?

Issue - State: open - Opened by woodruffw over 2 years ago

#13 - Do a better job of filtering Mach-O symbol tables

Issue - State: open - Opened by woodruffw over 2 years ago - 1 comment
Labels: enhancement, C:core

#12 - Don't audit a shared object if it doesn't look like a Python extension

Issue - State: closed - Opened by woodruffw over 2 years ago - 1 comment
Labels: enhancement, C:core

#11 - Support NO_COLOR

Issue - State: closed - Opened by woodruffw over 2 years ago
Labels: C:cli

#10 - Cache HTTP requests

Issue - State: closed - Opened by woodruffw over 2 years ago
Labels: C:core

#9 - README: more details, CI checks

Pull Request - State: closed - Opened by woodruffw over 2 years ago

#8 - abi3audit: more spec, extractor, CLI refactoring

Pull Request - State: closed - Opened by woodruffw over 2 years ago
Labels: C:cli, C:core

#7 - abi3audit: make the CLI more responsive

Pull Request - State: closed - Opened by woodruffw over 2 years ago

GitHub / trailofbits/abi3audit issues and pull requests