gitlab-org/security-products/analyzers/common issues and pull requests

#168 - Change image to golang:1.20

Pull Request - State: closed - Opened by katrinleinweber over 1 year ago - 9 comments
Labels: Support Team Contributions, maintenance::pipelines, type::maintenance

#167 - Draft: Test changing golint

Pull Request - State: opened - Opened by ifrenkel over 1 year ago - 4 comments
Labels: devops::secure, group::composition analysis, section::sec

#166 - Deduplicate logging level section & suggest env var

Pull Request - State: merged - Opened by katrinleinweber over 1 year ago - 9 comments
Labels: Support Team Contributions, Technical Writing, ci-build, devops::secure, docs::improvement, documentation, section::sec, type::maintenance

#165 - Bump testify

Pull Request - State: merged - Opened by jamesliu-gitlab about 2 years ago - 5 comments
Labels: Category:SAST, devops::secure, group::static analysis, maintenance::dependency, section::sec, type::maintenance

#164 - chore: Update README

Pull Request - State: merged - Opened by theoretick about 2 years ago - 23 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, documentation, group::static analysis, maintenance::usability, section::sec, type::maintenance

#163 - Do not color newline in log messages

Pull Request - State: merged - Opened by adamcohen about 2 years ago - 9 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, maintenance::refactor, section::sec, type::maintenance

#162 - Add support for double star glob patterns

Pull Request - State: merged - Opened by jamesliu-gitlab over 2 years ago - 34 comments
Labels: Category:SAST, backend, devops::secure, feature::enhancement, group::static analysis, section::sec, type::feature

#161 - Document Docker login step before running analyzer locally

Pull Request - State: merged - Opened by katrinleinweber over 2 years ago - 11 comments
Labels: Category:SAST, devops::secure, documentation, group::static analysis, section::sec, type::maintenance

#160 - Add caller info to log messages

Pull Request - State: merged - Opened by ifrenkel over 2 years ago - 38 comments
Labels: devops::secure, group::composition analysis, maintenance::refactor, section::sec, type::maintenance

#159 - Update v2 paths to v3

Pull Request - State: merged - Opened by dsearles over 2 years ago - 4 comments
Labels: Category:SAST, backend, devops::secure, group::static analysis, section::sec, type::feature

#158 - chore: Drop deprecated command and issue modules

Pull Request - State: merged - Opened by theoretick over 2 years ago - 6 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Fuzz Testing, Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis, section::sec

#157 - Explain automatic release process in readme

Pull Request - State: merged - Opened by adamcohen almost 3 years ago - 14 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, maintenance::pipelines, section::sec, type::maintenance

#156 - Test danger-bot

Pull Request - State: closed - Opened by adamcohen almost 3 years ago - 2 comments
Labels: group::composition analysis

#155 - Remove issue/command in favor of external packages

Pull Request - State: closed - Opened by dsearles almost 3 years ago - 2 comments
Labels: Category:SAST, backend, devops::secure, group::static analysis, section::sec, type::maintenance

#154 - Remove code for updating gitconfig and change DefaultBundlePath value

Pull Request - State: merged - Opened by adamcohen about 3 years ago - 6 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, SOX Reviewed, backend, devops::secure, group::composition analysis, priority::2, section::sec, severity::2, type::bug

#153 - chore: Bump danger-bot to latest version

Pull Request - State: merged - Opened by theoretick about 3 years ago - 3 comments
Labels: Category:SAST, devops::secure, group::static analysis, section::sec, type::maintenance

#152 - chore: Add maintenance-mode warnings to issue and command modules

Pull Request - State: merged - Opened by theoretick about 3 years ago - 13 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis, section::sec, type::maintenance

#151 - Remove SAST_DEFAULT_ANALYZERS

Pull Request - State: merged - Opened by rossfuhrman over 3 years ago - 4 comments
Labels: Category:SAST, devops::secure, group::static analysis, section::sec, type::maintenance

#150 - Update release process

Pull Request - State: merged - Opened by gonzoyumo over 3 years ago - 6 comments
Labels: backend, devops::secure, group::composition analysis, section::sec

#149 - Use testify in tests

Pull Request - State: merged - Opened by adamcohen over 3 years ago - 8 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, maintenance::refactor, section::sec, type::maintenance

#148 - Update README.md to ensure the release source has a passing pipeline before releasing.

Pull Request - State: merged - Opened by zrice over 3 years ago - 5 comments
Labels: Category:SAST, backend, documentation, group::static analysis, type::maintenance

#147 - chore: Fix dangerbot

Pull Request - State: merged - Opened by theoretick over 3 years ago - 6 comments
Labels: Category:SAST, devops::secure, group::static analysis, type::maintenance

#146 - Update Readme.md

Pull Request - State: merged - Opened by singhanshuman over 3 years ago - 7 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, Community contribution, Hackathon, SCA:Dependency Scanning, backend, devops::secure, section::sec, type::maintenance

#145 - doc: Add maintenance mode notice

Pull Request - State: merged - Opened by theoretick over 3 years ago - 11 comments
Labels: Category:Container Scanning, Category:DAST, Category:Dependency Scanning [DEPRECATED], Category:Fuzz Testing, Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis, type::maintenance

#144 - Improve release process docs

Pull Request - State: merged - Opened by adamcohen over 3 years ago - 10 comments
Labels: Category:Container Scanning, Category:DAST, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, documentation, group::composition analysis, section::sec, type::maintenance

#143 - WIP: Allow configurable exit code

Pull Request - State: closed - Opened by adamcohen over 3 years ago - 11 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, feature::addition, group::composition analysis, priority::2, quad-planning::complete-action, section::sec, type::feature

#142 - Change image to golang:1.15

Pull Request - State: merged - Opened by fcatteau almost 4 years ago - 3 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, maintenance::refactor, section::sec, type::maintenance

#141 - Drop ruleset package

Pull Request - State: merged - Opened by theoretick almost 4 years ago - 6 comments
Labels: Category:SAST, devops::secure, group::static analysis, section::sec, type::maintenance

#140 - Append newline when writing CA certificate

Pull Request - State: merged - Opened by adamcohen almost 4 years ago - 9 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, section::sec, type::maintenance

#139 - refactor: Drop unused `table` package

Pull Request - State: merged - Opened by theoretick almost 4 years ago - 7 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis, maintenance::refactor, section::sec, type::maintenance

#138 - refactor: Drop template module

Pull Request - State: merged - Opened by theoretick almost 4 years ago - 12 comments
Labels: devops::secure, group::static analysis, maintenance::refactor, maintenance::workflow, type::maintenance

#137 - Update analyzers dev section and label suggestion

Pull Request - State: merged - Opened by rossfuhrman almost 4 years ago - 13 comments
Labels: devops::secure, documentation, group::static analysis, section::sec, type::maintenance

#136 - Fix bug in ruleset package preventing disablements from being enforced

Pull Request - State: merged - Opened by zrice almost 4 years ago - 15 comments
Labels: Category:SAST, backend, devops::secure, group::static analysis, section::sec, type::bug

#135 - chore: Bump urfave/cli dep to v2.3.0

Pull Request - State: merged - Opened by theoretick almost 4 years ago - 13 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:Fuzz Testing, Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis, section::sec, type::maintenance

#134 - Add patch and pre-release segments to version

Pull Request - State: merged - Opened by plafoucriere almost 4 years ago - 21 comments
Labels: Category:Vulnerability Management, devops::secure, group::threat insights, section::sec, type::feature

#133 - Add note about pointing to a locally changed common using replace

Pull Request - State: merged - Opened by zrice almost 4 years ago - 21 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Category:Static Site Editor, SCA:Dependency Scanning, devops::secure, group::static analysis, section::sec

#132 - Reverting back to explicit error structs for easier type checking in analyzers

Pull Request - State: merged - Opened by dsearles almost 4 years ago - 1 comment

#131 - Update Ruleset package with custom errors and fix Null Vulnerability bug

Pull Request - State: merged - Opened by zrice about 4 years ago - 36 comments
Labels: Category:SAST, backend, devops::secure, group::static analysis, section::sec, type::bug

#130 - feat: add debug logging when applying path exclusions

Pull Request - State: merged - Opened by theoretick about 4 years ago - 12 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, feature::addition, group::static analysis, section::sec, type::feature

#129 - Disable rulesets

Pull Request - State: merged - Opened by zrice about 4 years ago - 43 comments
Labels: Category:SAST, backend, devops::secure, feature::addition, group::static analysis, section::sec, type::feature

#127 - Remove unused issue.Mitigations field

Pull Request - State: merged - Opened by theoretick about 4 years ago - 9 comments
Labels: devops::secure, group::static analysis, section::sec, type::maintenance

#125 - Add hackerone identifier type

Pull Request - State: merged - Opened by ifrenkel about 4 years ago - 9 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, section::sec, type::feature

#124 - Use Secret Detection via its own template

Pull Request - State: merged - Opened by gonzoyumo about 4 years ago - 1 comment
Labels: Dogfooding, Enterprise Edition, backend, devops::secure, group::composition analysis, maintenance::pipelines, section::sec, type::maintenance

#123 - Upgrade go to golang 1.15.0

Pull Request - State: merged - Opened by dsearles about 4 years ago - 1 comment
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::static analysis, section::sec, type::maintenance

#122 - Warn if no files match instead of returning error

Pull Request - State: merged - Opened by adamcohen about 4 years ago - 10 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, customer, devops::secure, group::composition analysis, priority::2, regression, regression:12.10, section::sec, severity::3, type::bug

#120 - Remove orchestrator package

Pull Request - State: merged - Opened by fcatteau about 4 years ago - 10 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, section::sec, type::maintenance

#119 - Update golang dependencies

Pull Request - State: merged - Opened by twoodham about 4 years ago - 5 comments
Labels: backend, devops::secure, group::static analysis, section::sec, type::maintenance

#117 - Add danger-bot to common project

Pull Request - State: merged - Opened by ssarka about 4 years ago - 3 comments
Labels: group::composition analysis, section::sec, type::maintenance

#116 - Add dependency path to dependencies

Pull Request - State: merged - Opened by fcatteau about 4 years ago - 11 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, section::sec, type::feature

#115 - Add rules package for custom ruleset support

Pull Request - State: merged - Opened by zrice about 4 years ago - 52 comments
Labels: devops::secure, feature::addition, group::static analysis, section::sec, type::feature

#114 - Add coverage fuzzing fields to json report

Pull Request - State: merged - Opened by ypats about 4 years ago - 36 comments
Labels: Category:Fuzz Testing, devops::secure, fuzzing::coverage, group::dynamic analysis, section::sec

#113 - Add start_time/end_time/status to reports

Pull Request - State: merged - Opened by adamcohen about 4 years ago - 41 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, Stretch, backend, devops::secure, group::composition analysis, quad-planning::complete-action, security reports integration, type::feature

#112 - Allow git to use cacert

Pull Request - State: merged - Opened by adamcohen about 4 years ago - 4 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, SLO::Missed, backend, devops::secure, group::composition analysis, priority::2, quad-planning::complete-no-action, severity::2, type::bug

#110 - Provide examples for pathfilter

Pull Request - State: merged - Opened by fcatteau about 4 years ago - 3 comments
Labels: backend, devops::secure, group::composition analysis, type::maintenance

#109 - Remove dates from changelog

Pull Request - State: merged - Opened by fcatteau about 4 years ago - 6 comments
Labels: backend, devops::secure, group::composition analysis, type::maintenance

#108 - Add cli app initializer function

Pull Request - State: merged - Opened by adamcohen over 4 years ago - 23 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, quad-planning::complete-action, security reports integration, type::feature

#107 - Output scan object in report

Pull Request - State: merged - Opened by adamcohen over 4 years ago - 25 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, quad-planning::complete-action, security reports integration, type::feature

#106 - Add ScannerURL and VendorName

Pull Request - State: closed - Opened by adamcohen over 4 years ago - 28 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, quad-planning::complete-action, security reports integration, type::feature

#105 - Add Scan object with scanner and type to report

Pull Request - State: merged - Opened by adamcohen over 4 years ago - 23 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Deliverable, Enterprise Edition, GitLab Ultimate, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis, quad-planning::complete-action, security reports integration, type::feature

#104 - Switch to the MIT Expat license

Pull Request - State: merged - Opened by dsearles over 4 years ago - 23 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::static analysis, type::feature

#102 - Chore: Bump orchestrator common to v2.10.3

Pull Request - State: merged - Opened by theoretick over 4 years ago - 7 comments
Labels: Category:SAST, devops::secure, group::static analysis, type::maintenance

#101 - Add more info logs

Pull Request - State: merged - Opened by dsearles over 4 years ago - 11 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::static analysis

#100 - Change logutil date format to RFC3339

Pull Request - State: merged - Opened by dsearles over 4 years ago - 7 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::static analysis

#99 - Set correct date for v2.10.1

Pull Request - State: merged - Opened by dsearles over 4 years ago - 3 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::static analysis, maintenance::refactor

#98 - Add README to the logutil package

Pull Request - State: merged - Opened by dsearles over 4 years ago - 2 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Secret Detection, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::static analysis

#96 - Standardize logs with logrus

Pull Request - State: merged - Opened by dsearles over 4 years ago - 48 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::static analysis, maintenance::refactor

#95 - Enable Dependency-Scanning

Pull Request - State: merged - Opened by theoretick over 4 years ago - 6 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, backstage [DEPRECATED], devops::secure, group::static analysis, test

#92 - Add commit object to location in support of secret detection

Pull Request - State: merged - Opened by zrice over 4 years ago - 99 comments
Labels: Category:Secret Detection, backend, devops::secure, group::static analysis

#90 - Add more details to Versioning and release process docs

Pull Request - State: merged - Opened by adamcohen over 4 years ago - 15 comments
Labels: documentation, group::composition analysis, type::maintenance

#89 - Add job to update common in all analyzers

Pull Request - State: merged - Opened by ssarka over 4 years ago - 46 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::static analysis

#88 - WIP: Skip search

Pull Request - State: closed - Opened by zrice over 4 years ago - 4 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, devops::secure, group::static analysis, section::sec, type::bug

#87 - Export cacert.DefaultBundlePath constant

Pull Request - State: merged - Opened by adamcohen over 4 years ago - 10 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, Enterprise Edition, SCA:Dependency Scanning, backend, devops::secure, group::composition analysis

#86 - Update CA bundle logic

Pull Request - State: merged - Opened by dsearles over 4 years ago - 43 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::static analysis

#83 - Rename initialize package to cacert

Pull Request - State: merged - Opened by fcatteau over 4 years ago - 62 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::composition analysis, maintenance::refactor

#79 - Generate vulnerability ID

Pull Request - State: merged - Opened by fcatteau over 4 years ago - 61 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, group::composition analysis, type::feature

#76 - Add support for custom CA certs

Pull Request - State: merged - Opened by dsearles over 4 years ago - 24 comments
Labels: Category:SAST, devops::secure, group::static analysis, type::feature

#75 - Remove DAST-specific types and structs

Pull Request - State: merged - Opened by fcatteau over 4 years ago - 23 comments
Labels: Category:Container Scanning, Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::composition analysis

#73 - common logger

Pull Request - State: merged - Opened by zrice over 4 years ago - 44 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backend, group::static analysis, type::feature

#72 - Add project settings to README todos

Pull Request - State: merged - Opened by dsearles over 4 years ago - 13 comments
Labels: Category:SAST, devops::secure, documentation, group::static analysis, type::maintenance

#69 - Update Go from 1.11 to 1.13.7

Pull Request - State: merged - Opened by tnir almost 5 years ago - 7 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Community contribution, SCA:Dependency Scanning, backstage [DEPRECATED], ci-build, devops::secure, golang, maintenance::dependency

#66 - Update run example with VERSION default

Pull Request - State: merged - Opened by theoretick almost 5 years ago - 2 comments
Labels: Category:SAST, Stuff that should Just Work, backstage [DEPRECATED], documentation, group::static analysis, type::maintenance

#65 - Suppress the progress message on pulling analyzer image

Pull Request - State: merged - Opened by tnir almost 5 years ago - 18 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Community contribution, Enterprise Edition, SCA:Dependency Scanning, UX, backend, devops::secure

#64 - Log when downloading, starting analyzers

Pull Request - State: merged - Opened by tnir almost 5 years ago - 8 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, Community contribution, Enterprise Edition, SCA:Dependency Scanning, UX, backend, devops::secure

#60 - Emulate report v1

Pull Request - State: merged - Opened by fcatteau almost 5 years ago - 3 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, backend, backstage [DEPRECATED], devops::secure, group::composition analysis

#52 - Update Versioning and release process anchor tag

Pull Request - State: merged - Opened by rossfuhrman about 5 years ago - 1 comment
Labels: documentation, type::maintenance

#48 - Add slash path tests for pathfilter.Match

Pull Request - State: merged - Opened by theoretick about 5 years ago - 2 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backstage [DEPRECATED], devops::secure, group::static analysis

#41 - Filter out excluded paths in dependency list

Pull Request - State: merged - Opened by fcatteau over 5 years ago - 19 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, type::bug

#36 - Sort dependency files, dependencies

Pull Request - State: merged - Opened by fcatteau over 5 years ago - 2 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, type::feature

#35 - Add dependency files to reports

Pull Request - State: merged - Opened by fcatteau over 5 years ago - 41 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, type::feature

#34 - Filter report with new EXCLUDED_PATHS option

Pull Request - State: merged - Opened by fcatteau over 5 years ago - 17 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure, group::composition analysis, type::feature

#26 - WIP: Document when to release

Pull Request - State: closed - Opened by fcatteau over 5 years ago - 2 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, devops::secure

#25 - Sub-sort vulnerabilities using compare key

Pull Request - State: merged - Opened by fcatteau almost 6 years ago - 4 comments
Labels: Category:Dependency Scanning [DEPRECATED], Category:SAST, Category:Software Composition Analysis, SCA:Dependency Scanning, backstage [DEPRECATED], devops::secure

GitLab.com / gitlab-org/security-products/analyzers/common issues and pull requests