ossf/package-analysis

Issues

• Monitoring Data (with clear labels and malicious indicators) for Academic Research

  #1053 opened 6 months ago by Wapiti08
  0

• enhancement: github-actions analysis

  #1055 opened 6 months ago by thepwagner
  0

• Error from scanning the package

  #1047 opened 8 months ago by Yao-Wen-Chang
  3

• Report a critical issue

  #1041 opened 8 months ago by ya3raj
  1

• Proposed legal & governance improvements for the OpenSSF

  #1034 opened 9 months ago by hythloda
  1

• support extracting zip archives

  #971 opened a year ago by maxfisher-g
  2

• Dynamic analysis data in BigQuery is not being updated.

  #1000 opened 10 months ago by calebbrown
  2

• crates.io access is failing

  #1015 opened 10 months ago by calebbrown
  1

• Create test packages that simulate malicious behaviors we want to catch

  #1001 opened a year ago by elainechien
  0

• Windows support

  #999 opened a year ago by maxmeng-hw
  1

• Whether the pushed results are all malicious?

  #997 opened a year ago by Wapiti08
  4

• ES modules fail to be imported during node.js dynamic analysis

  #982 opened a year ago by maxfisher-g
  0

• Please

  #977 opened a year ago by branden1992
  1

• restructure dynamic analysis schema

  #960 opened a year ago by maxfisher-g
  0

• collect hash for downloaded archive

  #959 opened a year ago by maxfisher-g
  0

• Create BigQuery schema and ingest static analysis results

  #703 opened a year ago by maxfisher-g
  0

• Define a global entropy measurement for strings and literals

  #835 opened a year ago by maxfisher-g
  1

• Log strace raw data to a separate file instead of stdout

  #798 opened a year ago by maxfisher-g
  0

• Create new dynamic analysis phase for code execution

  #844 opened a year ago by maxfisher-g
  0

• The description about what types of data has been collected?

  #852 opened a year ago by Wapiti08
  1

• Update go to version 1.21

  #780 opened a year ago by maxfisher-g
  0

• Remove entropy summaries and add individual entries to each literal

  #834 opened a year ago by maxfisher-g
  1

• Change static analysis JSON schema to support BigQuery import

  #836 opened a year ago by maxfisher-g
  2

• Add unit tests for GCP and PubSub buckets in ResultStore

  #828 opened a year ago by maxfisher-g
  0

• Analysed package is not saved with correct name

  #811 opened a year ago by maxfisher-g
  0

• Add URL and IP address detection to static analysis

  #664 opened a year ago by maxfisher-g
  0

• Improve package download flow

  #770 opened 2 years ago by maxfisher-g
  0

• PubSub messages being redelivered while a worker is actively processing the message.

  #777 opened 2 years ago by calebbrown
  0

• PHP composer installation fails and breaks dynamic analysis dockerfile build

  #781 opened 2 years ago by maxfisher-g
  1

• Support Python packages that aren't on PyPI

  #755 opened 2 years ago by maxfisher-g
  2

• Figure out how to interrupt long-running package functions during automated execution

  #775 opened 2 years ago by maxfisher-g
  0

• Production workers are running out of container space for sandboxes

  #741 opened 2 years ago by calebbrown
  2

• Log stdout and stderr from dynamic analysis process

  #764 opened 2 years ago by maxfisher-g
  0

• Improve logging of podman errors

  #750 opened 2 years ago by maxfisher-g
  1

• crates.io error with `itoa` package

  #754 opened 2 years ago by maxfisher-g
  0

• Allow passing in sandbox configuration

  #731 opened 2 years ago by maxfisher-g
  0

• Replace google/gopacket with gopacket/gopacket

  #753 opened 2 years ago by calebbrown
  0

• Move logic for saving data to buckets to shared function(s) in `worker` package

  #748 opened 2 years ago by maxfisher-g
  0

• Remove legacy per-ecosystem sandbox images

  #725 opened 2 years ago by maxfisher-g
  0

• Copy local archives into sandbox rather than mounting

  #686 opened 2 years ago by maxfisher-g
  1

• Enable combined dynamic analysis sandbox in worker

  #714 opened 2 years ago by maxfisher-g
  0

• DNS requests appear to be missing or incomplete.

  #695 opened 2 years ago by maxfisher-g
  3

• Is the *.tgz in line 80 of the analyze-tarballs.sh file wrong?

  #705 opened 2 years ago by coffeehb
  1

• Sandbox failed (error starting container: exit status 125)

  #689 opened 2 years ago by rodion-gudz
  9

• Allow running code as part of dynamic analysis

  #672 opened 2 years ago by kushaldas
  4

• Add "tar.gz" for local PyPi package scanning supports

  #683 opened 2 years ago by coffeehb
  6

• Sandbox failed (error starting container: exit status 125)

  #679 opened 2 years ago by coffeehb
  5

• Unable to find image 'gcr.io/ossf-malware-analysis/analysis:latest' locally

  #680 opened 2 years ago by eternalbluei
  0

• Make approach to defining enums consistent across the project

  #663 opened 2 years ago by calebbrown
  6

• Refactor pkg/

  #651 opened 2 years ago by calebbrown
  9