7 Pull requests merged by 3 people

• chore(deps): update the base Docker image

  #1157 merged Aug 20, 2025

• test: refactor fake email heuristic to be more optimistic and allow offline tests

  #1154 merged Aug 19, 2025

• chore: use correct method for finding missing versions of java PURLs

  #1156 merged Aug 18, 2025

• refactor!: remove the automatic sbom generation feature for Java

  #1145 merged Aug 15, 2025

• test: resolve bugs in sourcecode analyzer to allow unit tests to run offline

  #1136 merged Aug 15, 2025

• chore(deps): update Souffle in base image to version 2.5

  #1155 merged Aug 15, 2025

• chore: fix a bug in SimilarProjectAnalyzer

  #1152 merged Aug 14, 2025

1 Pull request opened by 1 person

• feat: add local artifact command line argument

  #1159 opened Aug 19, 2025

3 Issues closed by 2 people

• CycloneDX Gradle plugin has non-detereminitic behavior

  #60 closed Aug 15, 2025

• Merge generated BOMs for mono repositories with multiple projects

  #56 closed Aug 15, 2025

• [Bug] - sourcecode analyzer unit tests do not run offline

  #1129 closed Aug 15, 2025

2 Issues opened by 2 people

• [Enhancement] - Verify local provenance

  #1158 opened Aug 19, 2025

• [Enhancement] - Optimize package structure extraction for Python packages

  #1153 opened Aug 14, 2025

13 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat: add reproducible central buildspec generation

  #1115 commented on Aug 20, 2025 • 64 new comments

• docs: update provenance tutorial

  #1110 commented on Aug 20, 2025 • 11 new comments

• feat: add AI module for LLM interaction and a heuristic for checking code–docstring consistency

  #1121 commented on Aug 15, 2025 • 8 new comments

• chore(deps): bump actions/setup-python from 5.4.0 to 5.6.0

  #1072 commented on Aug 15, 2025 • 0 new comments

• chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2

  #1093 commented on Aug 15, 2025 • 0 new comments

• chore(deps): update cyclonedx-bom requirement from <5.0.0,>=4.0.0 to >=4.0.0,<8.0.0

  #1124 commented on Aug 15, 2025 • 0 new comments

• test: test the Docker SBOM

  #1135 commented on Aug 19, 2025 • 0 new comments

• chore(deps): update cyclonedx-python-lib[validation] requirement from <8.0.0,>=7.3.4 to >=7.3.4,<12.0.0

  #1139 commented on Aug 15, 2025 • 0 new comments

• chore(deps): update mypy requirement from <1.16,>=1.0.0 to >=1.0.0,<1.18

  #1140 commented on Aug 15, 2025 • 0 new comments

• chore(deps): bump semgrep from 1.113.0 to 1.131.0

  #1142 commented on Aug 15, 2025 • 0 new comments

• chore(deps): bump github/codeql-action from 3.28.15 to 3.29.8

  #1148 commented on Aug 15, 2025 • 0 new comments

• chore(deps): bump actions/download-artifact from 4.2.1 to 5.0.0

  #1150 commented on Aug 15, 2025 • 0 new comments

• chore(deps): bump actions/checkout from 4.2.0 to 4.3.0

  #1151 commented on Aug 18, 2025 • 0 new comments