devops-kung-fu/bomber

Issues

• Scanning with Github provider not working

  #256 opened a month ago by rjuengling-hf
  0

• bomber should validate that mandatory fields exist on BOM load

  #107 opened a month ago by djschleen
  0

• Make Snyk API URL configurable

  #215 opened 7 months ago by moxli
  0

• Bomber not correctly detecting versions from CycloneDX BOM resulting in false positives

  #245 opened 2 months ago by rvesse
  2

• False negative scans when using bomber on SBOM with Cyclone CDX SpecVersion 1.6

  #242 opened 2 months ago by clobraico-hf
  3

• OSV Provider Optimizations

  #244 opened 2 months ago by djschleen
  0

• JSON output produces invalid json document

  #230 opened 2 months ago by AndriyDmytrenko
  2

• GitHub Security Advisory Provider

  #236 opened 2 months ago by djschleen
  0

• Vulnerability Database management

  #238 opened 2 months ago by anthonyharrison
  1

• Shows no package shown after passing Json File.

  #224 opened 3 months ago by Shweta4398
  7

• compitibility with cyclonedx-maven-plugin:2.8.1

  #227 opened 3 months ago by ZheSun88
  4

• Summary Renderer

  #179 opened 3 months ago by nhopkins19
  2

• Bomber reporting OSV vulnerabilities on package versions that aren't in SBOM

  #223 opened 3 months ago by ppeters0502
  5

• error retrieving vulnerability data (400 Bad Request)

  #212 opened 3 months ago by ArwynFr
  4

• Get missing or enhance licenses from ClearlyDefined

  #226 opened 4 months ago by djschleen
  0

• Please consider adopting OpenSSF Scorecard

  #225 opened 4 months ago by andrewpollock
  1

• Feature Request

  #221 opened 5 months ago by nhopkins19
  1

• SARIF output

  #125 opened 2 years ago by ericodonoghue
  1

• --ignore-file option not working

  #204 opened 8 months ago by sssylvester
  3

• HTML report generation fails silently when processing entire folder containing an "empty" SBOM

  #208 opened 8 months ago by henning-meinhardt
  2

• Doesn't work with CycloneDX version 1.5

  #182 opened 8 months ago by anthonyharrison
  2

• bomber doesn't detect packages

  #193 opened 9 months ago by davidmthomsen
  2

• Bomber is not finding packages in a SBOM file that has been converted using the CycloneDX Convert function

  #171 opened a year ago by 6mile
  3

• Exit code handling

  #161 opened a year ago by timsnyk
  13

• ```bomber``` should fail gracefully with a readable error message if an SBOM cannot be marshalled

  #160 opened a year ago by jnylund
  3

• No results when scanning a hierachical CycloneDX file from cyclonedx-cli

  #129 opened a year ago by Feelemoon
  10

• False version display 0.4.5 bomber

  #176 opened a year ago by AJIOXA
  4

• Regression: exit code is not zero when no vulnerabilities or issues found

  #178 opened a year ago by manolo
  3

• Create exit code documentation

  #175 opened a year ago by djschleen
  0

• Bomber deb clashes with existing package

  #172 opened a year ago by ashemedai
  2

• VS Code extension

  #180 opened a year ago by nhopkins19
  1

• error retrieving vulnerability data (400 Bad Request)

  #174 opened a year ago by AJIOXA
  7

• Standardize output of bomber as VDR output

  #114 opened 2 years ago by djschleen
  3

• Duplicate output lines

  #154 opened 2 years ago by Feelemoon
  4

• libc requirements in DEB

  #145 opened 2 years ago by Feelemoon
  5

• No results when scanning CycloneDX file from cargo-cyclonedx

  #127 opened 2 years ago by Feelemoon
  3

• Same test SBOM 500's OSSINDEX but not OSV

  #139 opened 2 years ago by djschleen
  1

• error retrieving vulnerability data (400 Bad Request)

  #152 opened 2 years ago by snowuyl
  3

• please add html support description on output of bomber -h

  #150 opened 2 years ago by fu7mu4
  0

• goreleaser not releasing

  #144 opened 2 years ago by djschleen
  1

• the 0.4.1 version in release will show 0.4.0 and show "open : no such file or directory" error

  #140 opened 2 years ago by erichsu0937
  1

• bomber published SBOM is incorrectly labeled and has suspicious product name

  #132 opened 2 years ago by surendrapathak
  1

• Components without Purls should not be processed

  #137 opened 2 years ago by djschleen
  0

• EPSS score output should include the probability as well as the existing percentage

  #109 opened 2 years ago by djschleen
  1

• (Feature Request) Github Action

  #102 opened 2 years ago by ppeters0502
  6

• Add --ignore-flag to ignore specific vulnerabilities

  #111 opened 2 years ago by pkunze
  3

• Add ZERO.health logo in a sponsor section on README.md

  #119 opened 2 years ago by djschleen
  0

• Always getting no packages detected from spdx files from yocto

  #121 opened 2 years ago by pmkohn
  3

• POM/Maven scanning capability

  #112 opened 2 years ago by nhopkins19
  2

• bomber fails when `licenses` are specified as `expression`

  #106 opened 2 years ago by manolo
  6