google/osv-scalibr

Issues

• Implement lints to match internal linting behavior

  #455 opened a month ago by another-rex
  2

• Setup `golangci-lint` in full

  #274 opened 5 months ago by G-Rath
  0

• Support multiple regsitries and authentication in PyPI clients

  #541 opened 13 days ago by cuixq
  0

• Can scalibr determine the dependency replationships?

  #532 opened 17 days ago by garethr
  0

• Feature Request: Recursively open archives

  #513 opened 21 days ago by ivmeta
  2

• pomxml extractor behaviour should be as close as possible to pomxmlnet

  #503 opened 24 days ago by cuixq
  0

• Ignore vendored Go module files by default

  #423 opened 2 months ago by picatz
  1

• Handle properties in repositories defined in Maven pom.xml

  #473 opened a month ago by cuixq
  0

• Refactor Maven pom.xml parsing logic in extractor and guided remediation

  #472 opened a month ago by cuixq
  0

• Migrate Guided Remediation from OSV-Scanner

  #454 opened a month ago by michaelkedar
  0

• Migrate `semantic` package from osv-scanner to osv-scalibr

  #257 opened a month ago by another-rex
  0

• Better support for profiles in transitive Maven pom.xmls

  #463 opened 6 months ago by michaelkedar
  3

• Add support for more ecosystems to semantic

  #457 opened a month ago by G-Rath
  0

• Make sure Maven `settings.xml` are read correctly

  #409 opened 2 months ago by cuixq
  2

• Filter extractors by actual capabilities

  #443 opened 2 months ago by cuixq
  3

• Make FileRequired faster by using HasSuffix instead of filepath.Base

  #440 opened 2 months ago by vpasdf
  0

• Please cut new release v0.1.X soon

  #425 opened 2 months ago by alanpchua
  1

• Support extracting Gradle `libs.versions.toml`

  #428 opened 2 months ago by cuixq
  0

• [FR] File Locations in SPDX SBOM for language packages

  #45 opened 10 months ago by rhdesmond
  1

• npm results returning a lot of false positives or are other tools missing stuff?

  #400 opened 2 months ago by mlieberman85
  12

• Add `classifier` and `type` to Maven PURL

  #426 opened 2 months ago by cuixq
  0

• Version flag in the CLI?

  #416 opened 2 months ago by mlieberman85
  0

• Review how to separate Location paths that's within an archive.

  #411 opened 2 months ago by another-rex
  0

• Add local parent paths when performing transitive Maven dependency extraction

  #408 opened 2 months ago by cuixq
  0

• Data Exfiltration Issues of WebViews

  #404 opened 2 months ago by ZizhanChen
  0

• Provide default sets of extractors for scanning in container vs source context

  #352 opened 3 months ago by oliverchang
  1

• Explore running linting on just new changes

  #346 opened 3 months ago by G-Rath
  0

• SBOM extractors should convert PURLs to the correct ecosystem

  #335 opened 4 months ago by another-rex
  0

• Support for non-versioned dependencies?

  #307 opened 4 months ago by puerco
  6

• Breaking Change: FileRequired

  #301 opened 4 months ago by vpasdf
  0

• Add workflows to improve the ease of open source contributions.

  #158 opened 7 months ago by another-rex
  6

• feat: Extract all fields of Alpine apk installed file

  #245 opened 5 months ago by another-rex
  1

• bug: Alpine apk extractor does not correctly extract commit hash

  #240 opened 5 months ago by another-rex
  2

• SPDX - "main" package does not have a SUPPLIER field

  #254 opened 5 months ago by Martiul
  2

• [README] Standalone binary installation instructions broken

  #194 opened 6 months ago by rhdesmond
  3

• Centralise logic of package URL transformations for each ecosystem

  #173 opened 7 months ago by another-rex
  0

• Detection of containers running in Docker and Podman runtime

  #144 opened 8 months ago by jessesmd
  0

• Error building on Ubuntu 18.04 VM

  #32 opened a year ago by rhdesmond
  2