ossf/alpha-omega

Issues

• Homepage: "The checks" section contains unclear example ("something can be exploited via a pull request")

  #359 opened 3 months ago by Chealer
  2

• engagements/2023/jquery/README.md: Broken link to OpenJS Foundation announcement/news

  #351 opened 5 months ago by Chealer
  2

• GRANT RECIPIENTS: Unclear mention of "ISRG"

  #348 opened 5 months ago by Chealer
  0

• GRANT RECIPIENTS: Unclear description for OpenSSL

  #350 opened 5 months ago by Chealer
  0

• GRANT RECIPIENTS: RubyCentral not described

  #347 opened 5 months ago by Chealer
  0

• GRANT RECIPIENTS: 2024 OpenRefactory typos

  #346 opened 5 months ago by Chealer
  0

• website: omega/tooling link does not work

  #336 opened 3 months ago by disconnect3d
  1

• GRANT RECIPIENTS: Unclear "ECLIPSE V2"

  #349 opened 4 months ago by Chealer
  1

• engagements/2023/jquery/README.md: Unclear purpose (introduction)

  #353 opened 5 months ago by Chealer
  0

• engagements/2023/jquery/README.md: Claims annual report contains December 2023 update

  #352 opened 5 months ago by Chealer
  0

• @latest doesn't work if it doesn't have an API key

  #181 opened a year ago by AOrps
  2

• Documentation Enhancements

  #182 opened a year ago by AOrps
  1

• Don't create an export directory on run failure

  #163 opened a year ago by AOrps
  1

• Implement is_safe_function() under model/filters

  #73 opened a year ago by Cyber-JiuJiteria
  1

• Implement signing / base

  #61 opened 2 years ago by Cyber-JiuJiteria
  0

• Implement api_download_file() in views/findings.py

  #76 opened a year ago by Cyber-JiuJiteria
  11

• Separate out javascript from html file

  #86 opened a year ago by Cyber-JiuJiteria
  1

• Investigate why manalyze takes so long

  #88 opened 2 years ago by scovetta
  0

• Protect environment variables better

  #90 opened 2 years ago by scovetta
  0

• [Analyzer] Shhgit no longer compiles

  #119 opened 2 years ago by scovetta
  0

• Assurance Assertions - Turn off evidence by default

  #133 opened a year ago by scovetta
  1

• AA: Dependency View is a mess

  #148 opened a year ago by scovetta
  0

• Discussion: CWE-based policies for Assurance Assertions

  #144 opened a year ago by scovetta
  0

• Toolshed bug jq error cannot locate commaai openpilot

  #180 opened a year ago by Cyber-JiuJiteria
  0

• Erroneous Version Resolution

  #187 opened a year ago by AOrps
  0

• Analyzer - Create an option flag to select scanners

  #230 opened a year ago by Cyber-JiuJiteria
  0

• Disable semgrep/opt.semgrep-rules.gitlab.eslint.detect-object-injection

  #147 opened a year ago by scovetta
  0

• Bug Fix on Analyzer Build Script

  #164 opened a year ago by AOrps
  1

• [Help wanted] Add maven to the default installed packages in the analyzer

  #92 opened 2 years ago by scovetta
  2

• Add better error handling to Security Scorecard assertion generator

  #93 opened 2 years ago by scovetta
  0

• Migrate the Toolshed powershell scripts to bash

  #70 opened 2 years ago by scovetta
  2

• MacBook bug: Unable to locate package powershell

  #81 opened 2 years ago by Cyber-JiuJiteria
  1

• SecurityScorecard: Multiple 'expiration' fields

  #94 opened 2 years ago by scovetta
  0

• complete implementation of dynamic.py

  #59 opened 2 years ago by Cyber-JiuJiteria
  1

• Expand export to support other package types

  #85 opened 2 years ago by Cyber-JiuJiteria
  0

• Add additional metrics to triage portal home page view

  #84 opened 2 years ago by scovetta
  0

• Support local directory analysis

  #82 opened 2 years ago by scovetta
  0

• implement get_intermediate_files() from azure storage

  #75 opened 2 years ago by Cyber-JiuJiteria
  0

• Add validation based on Microsoft Naming Referencing containers guide on blobs

  #74 opened 2 years ago by Cyber-JiuJiteria
  0

• We should probably use the format we defined in ossf/security-reviews. Maybe even change this to require that. There is a validator over in that repo we can use.

  #65 opened 2 years ago by scovetta
  0

• Consider adding additional information to logs (like local username).

  #64 opened 2 years ago by scovetta
  0

• Implement BaseEvidence

  #57 opened 2 years ago by Cyber-JiuJiteria
  1

• Generic Cloud storage design for support of other providers

  #63 opened 2 years ago by Cyber-JiuJiteria
  0

• Complete design and implementation of assertion subject

  #62 opened 2 years ago by Cyber-JiuJiteria
  0

• Implement Repository/Base

  #60 opened 2 years ago by Cyber-JiuJiteria
  0

• Implement BasePolicy

  #58 opened 2 years ago by Cyber-JiuJiteria
  0

• Design a method for securityscorecard.py that will be future proof for new package types.

  #56 opened 2 years ago by Cyber-JiuJiteria
  0

• Investigate GUAC

  #53 opened 2 years ago by scovetta
  0

• OAF / Naming

  #52 opened 2 years ago by scovetta
  0

• Generic support for container types

  #50 opened 2 years ago by Cyber-JiuJiteria
  0