chains-project/sbom.exe

Issues

• Dependency Dashboard

  #11 opened a year ago by renovate
  0

• Limit the modules instrumented

  #269 opened 3 months ago by algomaster99
  0

• False positive in `gephi`

  #249 opened 3 months ago by algomaster99
  0

• Investigate why `gephi` contains `MODIFIED` classes

  #51 opened 5 months ago by algomaster99
  6

• Not allowed classes for `graphhopper`

  #240 opened 6 months ago by algomaster99
  5

• False positives in PDFBox

  #230 opened 6 months ago by algomaster99
  8

• Rename GCA and Proxy classes

  #237 opened 6 months ago by algomaster99
  0

• `pdfbox` uses two more modules that it is not dependent upon directly

  #233 opened 6 months ago by algomaster99
  1

• Make hashing more specific

  #234 opened 6 months ago by algomaster99
  0

• Some reasons why runtime index generation of `PDFBox` is non-deterministic

  #158 opened 6 months ago by algomaster99
  2

• Non determinism of `$Proxy7`

  #214 opened 7 months ago by algomaster99
  0

• Add a feeling of safety in BSOD

  #219 opened 7 months ago by algomaster99
  0

• `java/lang/invoke/BoundMethodHandle$Species` are not allowlisted

  #213 opened 7 months ago by algomaster99
  4

• Dynamic features of Java

  #189 opened 8 months ago by algomaster99
  1

• GeneratedConstructorAccessor classes could be the same for each execution but their names may differ

  #195 opened 7 months ago by algomaster99
  5

• Some `$Proxy` classes are loaded but are not intercepted by the agent

  #203 opened 7 months ago by algomaster99
  4

• Check what surefire classes are loaded when there are no tests

  #176 opened 7 months ago by algomaster99
  0

• xUnkown not found in logs

  #179 opened 7 months ago by LogFlames
  2

• Supress loading of malicious class without exiting the program

  #144 opened 9 months ago by algomaster99
  2

• Rename `whitelist` to `allowlist` everywhere

  #191 opened 8 months ago by algomaster99
  2

• Make sure to record multiple classfile versions in supply chain

  #190 opened 8 months ago by algomaster99
  1

• Configure CI to run tests on Java 11

  #181 opened 8 months ago by algomaster99
  1

• log4j-core classes were not recorded by the supply-chain indexer

  #178 opened 8 months ago by algomaster99
  5

• Hash only some part of bytecode

  #156 opened 8 months ago by algomaster99
  8

• Create runtime-index based on the jdk index

  #169 opened 8 months ago by algomaster99
  1

• JDKIndexer misses two classes

  #159 opened 8 months ago by algomaster99
  0

• Abstract schema versions of CycloneDX 1.4 and 1.5

  #109 opened 8 months ago by algomaster99
  0

• Serialise runtime index

  #108 opened 8 months ago by algomaster99
  1

• Think about removing different provenace for `jdk`, `supply-chain`, and `runtime`

  #152 opened 8 months ago by algomaster99
  1

• Change `List<Provenance>` to `Set<Provenance>`

  #96 opened a year ago by algomaster99
  0

• Level of `jgit`

  #81 opened a year ago by algomaster99
  1

• Options for repository other than maven central

  #82 opened a year ago by algomaster99
  0

• Level of `ttorent`

  #83 opened a year ago by algomaster99
  1

• add fake blue screen of death when terminated

  #72 opened a year ago by monperrus
  0

• Explore hashing JDK classes

  #62 opened a year ago by MartinWitt
  1

• Fine-tune fingerprint if the final jar is shaded

  #20 opened a year ago by algomaster99
  1

• Trying to dogfood `terminator`

  #48 opened a year ago by algomaster99
  1

• Sorald's classes that are not recorded at build step, but are invoked at runtime

  #22 opened a year ago by algomaster99
  9

• How to generate the fingerprint for each OS?

  #18 opened a year ago by algomaster99
  1

• Mapping classfiles to dependency

  #2 opened a year ago by algomaster99
  2

• How to include `Proxy` classes in the fingerprint?

  #53 opened a year ago by algomaster99
  2

• More restricitive way to ignore classes from internal packages

  #54 opened a year ago by algomaster99
  1

• Explore the SYNTHETIC flag for runtime classes

  #61 opened a year ago by MartinWitt
  3

• `classfile-fingerprint:generate` fails when `externalJars` is a relative path

  #49 opened a year ago by algomaster99
  1

• Whitelist JDK classes

  #37 opened a year ago by algomaster99
  1

• Inclusion of classfile version in fingerprint

  #28 opened a year ago by algomaster99
  0

• Reduce minium maven version

  #4 opened a year ago by MartinWitt
  2