Skip to content

Issues: owasp-dep-scan/dep-scan

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

55 Open 93 Closed
55 Open 93 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Bug: Missing JSON report when running as Dockerized bug Something isn't working
#318 opened Jun 28, 2024 by kaiorafael
[v6] binary download is not reported for phantomjs-prebuilt
#317 opened Jun 26, 2024 by prabhu
CVE-2019-18413 flagged as critical data-quality
#316 opened Jun 21, 2024 by prabhu
False-Positive: CVE-2022-24304 rejected by NVD data-quality
#315 opened Jun 21, 2024 by prabhu
Golang binaries are not scanned from within containers enhancement New feature or request
#314 opened Jun 13, 2024 by lm-sig
1
[docs] Lessons for analyzing common vulnerable repos
#312 opened Jun 6, 2024 by prabhu
Bug: Empty reachability report bug Something isn't working
#310 opened Jun 4, 2024 by zhcoden
1
[v6] choices for reachability analysis
#307 opened May 23, 2024 by prabhu
[risk-audit] Detect use of Trusted publisher
#301 opened Apr 23, 2024 by prabhu
Bug: Reachability scan fails bug Something isn't working
#300 opened Apr 22, 2024 by sjpritchard
3
cargo:http is yielding a lot of false positives
#299 opened Apr 17, 2024 by prabhu
False-Positive: I raised the topic on discord. I compared the DT, Depscan, and Grype analyzers. The results are presented in the table. I think it will be useful for correcting the quality of the analysis. false-positive A wrongly identified vulnerability needs-contributor
#290 opened Apr 4, 2024 by almaz045
1
False-Positive: CVE-2021-39913 false-positive A wrongly identified vulnerability
#286 opened Apr 3, 2024 by almaz045
7
Feature: VDB update frequency information enhancement New feature or request
#280 opened Mar 21, 2024 by johennin
2
[v6] Prefer xz vdb over rafs breaking
#279 opened Mar 19, 2024 by prabhu
[v6] Support for cpe based searches
#276 opened Mar 17, 2024 by prabhu
Feature: Support for nix packages enhancement New feature or request
#275 opened Mar 14, 2024 by prabhu
Feature: nu plugin enhancement New feature or request
#269 opened Feb 29, 2024 by prabhu
False-Positive: CVE-2022-3704 false-positive A wrongly identified vulnerability
#250 opened Feb 13, 2024 by prabhu
[v6] Feature: disable use of remote audit by default enhancement New feature or request
#242 opened Feb 11, 2024 by prabhu
2
Feature: Linux OS scanning needs work enhancement New feature or request
#239 opened Feb 8, 2024 by prabhu
Feature: Meta and starter packages such as spring starter could be handled better enhancement New feature or request
#224 opened Jan 25, 2024 by prabhu
Documentation about profiles documentation Improvements or additions to documentation
#221 opened Jan 24, 2024 by 0x123456789
4
Feature: Test with graalpython enhancement New feature or request
#202 opened Jan 4, 2024 by prabhu
Improving our Documentation
#199 opened Dec 27, 2023 by cerrussell
1 of 8 tasks
@cerrussell
ProTip! Exclude everything labeled bug with -label:bug.