Skip to content

Issues: owasp-dep-scan/dep-scan

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

61 Open 103 Closed
61 Open 103 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Question about direct and transitive dependencies
#357 opened Oct 11, 2024 by almaz045
1
False-Positive: Receiving findings for lodash@4.17.21 false-positive A wrongly identified vulnerability
#353 opened Sep 27, 2024 by harshit-kochar
4
Feature: Adding insight in json report enhancement New feature or request
#352 opened Sep 26, 2024 by Ali-Yazdani
3
Doesn't download dep scan bug Something isn't working
#348 opened Sep 13, 2024 by itsarraj
1
Feature: Adding custom feeds to the database enhancement New feature or request
#336 opened Aug 21, 2024 by Nadir-CS
3
Bug: Error when scanning Gradle Project bug Something isn't working
#326 opened Jul 10, 2024 by aydinnyunus
1
Feature: Please consider adopting OpenSSF Scorecard enhancement New feature or request
#324 opened Jul 9, 2024 by andrewpollock
1
Bug: Missing JSON report when running as Dockerized bug Something isn't working
#318 opened Jun 28, 2024 by kaiorafael
2
CVE-2019-18413 flagged as critical data-quality
#316 opened Jun 21, 2024 by prabhu
1
False-Positive: CVE-2022-24304 rejected by NVD data-quality
#315 opened Jun 21, 2024 by prabhu
Golang binaries are not scanned from within containers enhancement New feature or request
#314 opened Jun 13, 2024 by lm-sig
1
[docs] Lessons for analyzing common vulnerable repos
#312 opened Jun 6, 2024 by prabhu
Bug: Empty reachability report bug Something isn't working
#310 opened Jun 4, 2024 by zhcoden
1
[v6] choices for reachability analysis
#307 opened May 23, 2024 by prabhu
[risk-audit] Detect use of Trusted publisher
#301 opened Apr 23, 2024 by prabhu
Bug: Reachability scan fails bug Something isn't working
#300 opened Apr 22, 2024 by sjpritchard
3
cargo:http is yielding a lot of false positives
#299 opened Apr 17, 2024 by prabhu
False-Positive: I raised the topic on discord. I compared the DT, Depscan, and Grype analyzers. The results are presented in the table. I think it will be useful for correcting the quality of the analysis. false-positive A wrongly identified vulnerability needs-contributor
#290 opened Apr 4, 2024 by almaz045
1
False-Positive: CVE-2021-39913 false-positive A wrongly identified vulnerability
#286 opened Apr 3, 2024 by almaz045
7
Feature: VDB update frequency information enhancement New feature or request
#280 opened Mar 21, 2024 by johennin
2
[v6] Prefer xz vdb over rafs breaking
#279 opened Mar 19, 2024 by prabhu
[v6] Support for cpe based searches
#276 opened Mar 17, 2024 by prabhu
Feature: Support for nix packages enhancement New feature or request
#275 opened Mar 14, 2024 by prabhu
Feature: nu plugin enhancement New feature or request
#269 opened Feb 29, 2024 by prabhu
False-Positive: CVE-2022-3704 false-positive A wrongly identified vulnerability
#250 opened Feb 13, 2024 by prabhu
ProTip! Adding no:label will show everything without a label.