devops-kung-fu/bomber

Issues

• JSON output produces invalid json document

  #230 opened a month ago by AndriyDmytrenko
  0

• compitibility with cyclonedx-maven-plugin:2.8.1

  #227 opened a month ago by ZheSun88
  4

• Summary Renderer

  #179 opened a month ago by nhopkins19
  2

• Bomber reporting OSV vulnerabilities on package versions that aren't in SBOM

  #223 opened a month ago by ppeters0502
  5

• error retrieving vulnerability data (400 Bad Request)

  #212 opened a month ago by ArwynFr
  4

• Shows no package shown after passing Json File.

  #224 opened a month ago by Shweta4398
  6

• Make Snyk API URL configurable

  #215 opened 5 months ago by moxli
  0

• Get missing or enhance licenses from ClearlyDefined

  #226 opened 2 months ago by djschleen
  0

• Please consider adopting OpenSSF Scorecard

  #225 opened 2 months ago by andrewpollock
  1

• Feature Request

  #221 opened 4 months ago by nhopkins19
  1

• SARIF output

  #125 opened 2 years ago by ericodonoghue
  1

• --ignore-file option not working

  #204 opened 7 months ago by sssylvester
  3

• HTML report generation fails silently when processing entire folder containing an "empty" SBOM

  #208 opened 6 months ago by henning-meinhardt
  2

• Doesn't work with CycloneDX version 1.5

  #182 opened 6 months ago by anthonyharrison
  2

• Create Website

  #94 opened 6 months ago by djschleen
  0

• bomber doesn't detect packages

  #193 opened 7 months ago by davidmthomsen
  2

• Bomber is not finding packages in a SBOM file that has been converted using the CycloneDX Convert function

  #171 opened a year ago by 6mile
  3

• Exit code handling

  #161 opened 10 months ago by timsnyk
  13

• ```bomber``` should fail gracefully with a readable error message if an SBOM cannot be marshalled

  #160 opened 10 months ago by jnylund
  3

• No results when scanning a hierachical CycloneDX file from cyclonedx-cli

  #129 opened 10 months ago by Feelemoon
  10

• EPSS enricher will only return the first 100 results

  #101 opened 2 years ago by garethr
  2

• False version display 0.4.5 bomber

  #176 opened 10 months ago by AJIOXA
  4

• Regression: exit code is not zero when no vulnerabilities or issues found

  #178 opened 10 months ago by manolo
  3

• Create exit code documentation

  #175 opened 10 months ago by djschleen
  0

• Bomber deb clashes with existing package

  #172 opened 10 months ago by ashemedai
  2

• VS Code extension

  #180 opened a year ago by nhopkins19
  1

• error retrieving vulnerability data (400 Bad Request)

  #174 opened a year ago by AJIOXA
  7

• Standardize output of bomber as VDR output

  #114 opened 2 years ago by djschleen
  3

• Duplicate output lines

  #154 opened a year ago by Feelemoon
  4

• libc requirements in DEB

  #145 opened a year ago by Feelemoon
  5

• No results when scanning CycloneDX file from cargo-cyclonedx

  #127 opened a year ago by Feelemoon
  3

• Same test SBOM 500's OSSINDEX but not OSV

  #139 opened a year ago by djschleen
  1

• error retrieving vulnerability data (400 Bad Request)

  #152 opened a year ago by snowuyl
  3

• please add html support description on output of bomber -h

  #150 opened a year ago by fu7mu4
  0

• goreleaser not releasing

  #144 opened 2 years ago by djschleen
  1

• the 0.4.1 version in release will show 0.4.0 and show "open : no such file or directory" error

  #140 opened 2 years ago by erichsu0937
  1

• bomber published SBOM is incorrectly labeled and has suspicious product name

  #132 opened 2 years ago by surendrapathak
  1

• Components without Purls should not be processed

  #137 opened 2 years ago by djschleen
  0

• EPSS score output should include the probability as well as the existing percentage

  #109 opened 2 years ago by djschleen
  1

• Fetch data from VulnerableCode

  #98 opened 2 years ago by pombredanne
  2

• (Feature Request) Github Action

  #102 opened 2 years ago by ppeters0502
  6

• Add --ignore-flag to ignore specific vulnerabilities

  #111 opened 2 years ago by pkunze
  3

• Add ZERO.health logo in a sponsor section on README.md

  #119 opened 2 years ago by djschleen
  0

• Always getting no packages detected from spdx files from yocto

  #121 opened 2 years ago by pmkohn
  3

• qt.qpa.xcb: could not connect to display

  #95 opened 2 years ago by anotherbridge
  5

• Need a generous Graphic Designer to donate a new logo

  #97 opened 2 years ago by djschleen
  1

• POM/Maven scanning capability

  #112 opened 2 years ago by nhopkins19
  2

• bomber fails when `licenses` are specified as `expression`

  #106 opened 2 years ago by manolo
  6

• bomber should validate that mandatory fields exist on BOM load

  #107 opened 2 years ago by djschleen
  0

• EPSS not working with non-CVE IDs

  #100 opened 2 years ago by garethr
  2