-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Report introduced, resolved, and unchanged findings against a baseline
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Publish a first-class GitHub Action with safe SARIF upload
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestgithub_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codeStatus: Open.Model monorepos as explicit projects with merged and isolated results
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Support authenticated package registries and mirrors safely
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Plan explainable direct-dependency remediation without editing files
dependenciesPull requests that update a dependency filePull requests that update a dependency filedocumentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Add a versioned organization policy file
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Import signed offline advisory snapshots with freshness disclosure
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Add Composer lockfile support through an ecosystem acceptance harness
dependenciesPull requests that update a dependency filePull requests that update a dependency filedocumentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.Tracking: SBOM output against the 2026 Minimum Elements — 6 of 12 fields met
enhancementNew feature or requestNew feature or requestStatus: Open.#30 In IcebergAI/IcebergSCA;A revised SBOM is indistinguishable from the original — but #20 argues against the fix
enhancementNew feature or requestNew feature or requestStatus: Open.#29 In IcebergAI/IcebergSCA;Generation Context: say that these SBOMs are pre-build source analysis, and stop inventing a tool version
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomersStatus: Open.#28 In IcebergAI/IcebergSCA;No Software Producer on any component, and no way to say we do not know
enhancementNew feature or requestNew feature or requestStatus: Open.#27 In IcebergAI/IcebergSCA;