ossf/alpha-omega
Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
Open Policy AgentApache-2.0
Issues
- 2
Homepage: "The checks" section contains unclear example ("something can be exploited via a pull request")
#359 opened by Chealer - 2
engagements/2023/jquery/README.md: Broken link to OpenJS Foundation announcement/news
#351 opened by Chealer - 0
GRANT RECIPIENTS: Unclear mention of "ISRG"
#348 opened by Chealer - 0
GRANT RECIPIENTS: Unclear description for OpenSSL
#350 opened by Chealer - 0
GRANT RECIPIENTS: RubyCentral not described
#347 opened by Chealer - 0
GRANT RECIPIENTS: 2024 OpenRefactory typos
#346 opened by Chealer - 1
website: omega/tooling link does not work
#336 opened by disconnect3d - 1
GRANT RECIPIENTS: Unclear "ECLIPSE V2"
#349 opened by Chealer - 0
- 0
engagements/2023/jquery/README.md: Claims annual report contains December 2023 update
#352 opened by Chealer - 2
@latest doesn't work if it doesn't have an API key
#181 opened by AOrps - 1
Documentation Enhancements
#182 opened by AOrps - 1
Don't create an export directory on run failure
#163 opened by AOrps - 1
- 0
Implement signing / base
#61 opened by Cyber-JiuJiteria - 11
- 1
Separate out javascript from html file
#86 opened by Cyber-JiuJiteria - 0
Investigate why manalyze takes so long
#88 opened by scovetta - 0
Protect environment variables better
#90 opened by scovetta - 0
[Analyzer] Shhgit no longer compiles
#119 opened by scovetta - 1
Assurance Assertions - Turn off evidence by default
#133 opened by scovetta - 0
AA: Dependency View is a mess
#148 opened by scovetta - 0
- 0
- 0
Erroneous Version Resolution
#187 opened by AOrps - 0
- 0
- 1
Bug Fix on Analyzer Build Script
#164 opened by AOrps - 2
- 0
- 2
Migrate the Toolshed powershell scripts to bash
#70 opened by scovetta - 1
- 0
SecurityScorecard: Multiple 'expiration' fields
#94 opened by scovetta - 1
complete implementation of dynamic.py
#59 opened by Cyber-JiuJiteria - 0
- 0
- 0
Support local directory analysis
#82 opened by scovetta - 0
- 0
Add validation based on Microsoft Naming Referencing containers guide on blobs
#74 opened by Cyber-JiuJiteria - 0
We should probably use the format we defined in ossf/security-reviews. Maybe even change this to require that. There is a validator over in that repo we can use.
#65 opened by scovetta - 0
- 1
Implement BaseEvidence
#57 opened by Cyber-JiuJiteria - 0
- 0
- 0
Implement Repository/Base
#60 opened by Cyber-JiuJiteria - 0
Implement BasePolicy
#58 opened by Cyber-JiuJiteria - 0
Design a method for securityscorecard.py that will be future proof for new package types.
#56 opened by Cyber-JiuJiteria - 0
Investigate GUAC
#53 opened by scovetta - 0
OAF / Naming
#52 opened by scovetta - 0
Generic support for container types
#50 opened by Cyber-JiuJiteria