14 Pull requests merged by 5 people

• chore(deps): bump actions/upload-artifact from 4.4.0 to 4.5.0

  #4645 merged Dec 24, 2024

• Improved the alt-text in Architecture and Metrics in Manual.md, solves #4604

  #4650 merged Dec 24, 2024

• chore(deps): bump codecov/codecov-action from 5.0.2 to 5.1.2

  #4644 merged Dec 23, 2024

• ci: disable python 3.8 testing & sbom

  #4647 merged Dec 23, 2024

• chore: update checkers table

  #4648 merged Dec 23, 2024

• chore: update SBOM for Python 3.12

  #4637 merged Dec 23, 2024

• chore(deps): bump github/codeql-action from 3.27.9 to 3.28.0

  #4646 merged Dec 23, 2024

• feat(checker): add orc

  #4636 merged Dec 23, 2024

• chore(deps): bump actions/cache from 4.1.2 to 4.2.0

  #4643 merged Dec 23, 2024

• chore: update SBOM for Python 3.11

  #4640 merged Dec 23, 2024

• chore: update SBOM for Python 3.10

  #4638 merged Dec 23, 2024

• chore: update SBOM for Python 3.9

  #4641 merged Dec 23, 2024

• chore: update SBOM for Python 3.8

  #4639 merged Dec 23, 2024

• fix: update subversion pattern

  #4635 merged Dec 20, 2024

29 Issues closed by 1 person

• fix: tempfile cleanup improvements?

  #3874 closed Dec 26, 2024

• fix: use mirror more aggressively in times when it's useful

  #4038 closed Dec 26, 2024

• test: shift default tests to use json-mirror and move nvd tests to network job?

  #4112 closed Dec 26, 2024

• fix: follow up on fuzzing reports (September 2024 edition)

  #4325 closed Dec 26, 2024

• feat: Convert NVD API 2.0 to JSON files for mirroring

  #3199 closed Dec 26, 2024

• ci: extend cached job to try mirror?

  #4240 closed Dec 26, 2024

• test: improve coverage of tool (meta-issue)

  #4257 closed Dec 26, 2024

• docs: address warnings in docs builds

  #4079 closed Dec 26, 2024

• fix: reduce number of binaries detected by openSSF scorecard

  #4148 closed Dec 26, 2024

• discussion: benchmarking against other tools

  #4182 closed Dec 26, 2024

• EPSS broken?

  #4127 closed Dec 26, 2024

• ci: ossf scorecard errors

  #4046 closed Dec 26, 2024

• BREAKING CHANGE: stopping support for windows with python < 3.12

  #4002 closed Dec 26, 2024

• Feature request: add new language library/package parsers

  #1980 closed Dec 26, 2024

• feat: Errors after running `pytest`

  #3836 closed Dec 26, 2024

• feat: add CPE support to SBOM parsing

  #2943 closed Dec 26, 2024

• bug: Data source OSV over-writing data incorrectly

  #3721 closed Dec 26, 2024

• fix: [CannotParseVersionException: version string = 2018.05.16t23.35.33z]

  #3661 closed Dec 26, 2024

• test: improve test coverage in print_mode.py

  #2930 closed Dec 26, 2024

• ci: dependabot sending duplicate update PRs for things in doc/

  #3178 closed Dec 26, 2024

• feat: more customizable http headers?

  #3197 closed Dec 26, 2024

• Consider rewrite to use lief framework

  #3142 closed Dec 26, 2024

• Next Steps for Type Checking (discussion)

  #2316 closed Dec 26, 2024

• test: test_debian_available_fix_output is sometimes failing

  #3096 closed Dec 26, 2024

• test: Hints for places to look at improving code coverage

  #2927 closed Dec 26, 2024

• Update SBOM Action for Windows

  #2686 closed Dec 26, 2024

• CI: OSSF Scorecard recommendation Fuzzing

  #2680 closed Dec 26, 2024

• Discussion: Running fuzzing automatically / in the open?

  #1908 closed Dec 26, 2024

• docs: Improve alt-text in Architecture and Metrics

  #4604 closed Dec 24, 2024

4 Issues opened by 1 person

• ci: fix fuzz jobs

  #4653 opened Dec 26, 2024

• bug: handle "sqlite3.OperationalError: database is locked" error

  #4652 opened Dec 24, 2024

• test: Fix tests to reduce chance of "database is locked" error.

  #4651 opened Dec 24, 2024

• ci: make sure codecov is working as expected

  #4649 opened Dec 23, 2024

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat: replacing to ruff python instead black and flake8

  #4534 commented on Dec 22, 2024 • 0 new comments

• micrium uC/Lib vulnerability causes cve-bin-tool to delete triage response data from triage input file

  #4417 commented on Dec 24, 2024 • 0 new comments

• discussion: behaviour for binary checkers with no CVEs associated

  #3646 commented on Dec 26, 2024 • 0 new comments

• fix: TestPackageListParser/test_valid_requirements is broken

  #3644 commented on Dec 26, 2024 • 0 new comments

• feat: Added CI-PRE-CHECKER for VENDOR_PRODUCT

  #3840 commented on Dec 26, 2024 • 0 new comments