Skip to content

Pull requests: google/osv-scalibr

New pull request New
33 Open 762 Closed
33 Open 762 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Extract the location from CDX files.
#857 opened Jun 25, 2025 by copybara-service bot Loading…
feat: manifest reader for Python requirements
#855 opened Jun 25, 2025 by cuixq Loading…
5
feat: Refactor to support generalised directory symlink traversal
#852 opened Jun 24, 2025 by another-rex Loading…
fix(deps): update osv-scalibr minor dependencies Pull requests that update a dependency file
#848 opened Jun 22, 2025 by renovate-bot Loading…
1 task
Introduce the Veles secret scanning library and rudimentary Scalibr integration.
#844 opened Jun 19, 2025 by copybara-service bot Loading…
feat: add Java reachability support
#842 opened Jun 19, 2025 by hogo6002 Loading…
Move standalone containerd metadata into its own package.
#831 opened Jun 13, 2025 by copybara-service bot Loading…
Added log identify image blob.
#799 opened Jun 3, 2025 by copybara-service bot Loading…
Enable all plugins with a single ScanConfig field / CLI arg..
#796 opened Jun 2, 2025 by copybara-service bot Loading…
feat(extractor): add support for chisel manifests
#764 opened May 20, 2025 by zhijie-yang • Draft
1
5
Prevent path traversal attacks using symbolic links in Scalibr by replacing DirFS with os.Root so that all file accesses are restricted to directory being scanned.
#750 opened May 14, 2025 by copybara-service bot Loading…
internal
#739 opened May 6, 2025 by copybara-service bot Loading…
Removed the heurisitic base layer detection call in FromV1Image.
#715 opened Apr 28, 2025 by copybara-service bot Loading…
Log error when inserting into a file node tree fails. Currently, we ignore errors when inserting nodes in the file node tree. We should at least log the error as a warning.
#714 opened Apr 28, 2025 by copybara-service bot Loading…
feat(guided remediation): Add PURLs to JSON output.
#704 opened Apr 23, 2025 by copybara-service bot Loading…
Changed external IP detection to parsing non loopback interfaces.
#691 opened Apr 16, 2025 by copybara-service bot Loading…
Add detection functionality whether a vulnerable instance is exposed to a network interface or just localhost for the existing code-server no auth detector.
#687 opened Apr 15, 2025 by copybara-service bot Loading…
Internal config updates.
#666 opened Apr 8, 2025 by copybara-service bot Loading…
Internal change.
#665 opened Apr 8, 2025 by copybara-service bot Loading…
docs: Include guidance for adding documentation to public functions and types
#657 opened Apr 4, 2025 by another-rex Loading…
1
feat: support extracting pylock.toml files
#654 opened Apr 3, 2025 by G-Rath • Draft
1
1
Internal
#649 opened Apr 2, 2025 by copybara-service bot Loading…
Internal Test
#648 opened Apr 2, 2025 by copybara-service bot Loading…
refactor: mark unused params with _
#644 opened Mar 31, 2025 by G-Rath Loading…
refactor: remove unneeded zero-value initializations on var variables
#643 opened Mar 31, 2025 by G-Rath Loading…
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.