-
Notifications
You must be signed in to change notification settings - Fork 192
Pull requests: google/osv-scalibr
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Prevent PyPI local registry cache path traversal
#2400
opened Sep 4, 2026 by
0xXA
Contributor
Loading…
Check GCFS layer directories directory-by-directory in collectGcfsDirs.
#2399
opened Sep 3, 2026 by
copybara-service
Bot
Loading…
Scanner maven registry cache path traversal
#2398
opened Sep 3, 2026 by
SzymonDrosdzol
Collaborator
Loading…
Filter invalid UTF-8 characters before serializing error messages to proto.
#2394
opened Sep 1, 2026 by
copybara-service
Bot
Loading…
fix: strip RubyGems platform suffix before version matching
#2387
opened Aug 28, 2026 by
xballoy
Loading…
Reject tar entries whose names escape the extraction root in image unpack
#2381
opened Aug 25, 2026 by
shaggyinsomniac
Loading…
Fix linter suggestion in extractor/filesystem/os/osrelease/osrelease
#2372
opened Aug 18, 2026 by
hainest
Loading…
feat: add Python setup.cfg inventory extractor (python/setupcfg)
#2369
opened Aug 17, 2026 by
Abhinav-143x
Contributor
Loading…
feat(bazel): Introduce standalone Bazel build graph extractor via Aspect
#2354
opened Aug 11, 2026 by
neilu-jain
Contributor
Loading…
Update SBOM generation tests and golden SPDX testdata.
#2341
opened Aug 4, 2026 by
copybara-service
Bot
Loading…
Do not let a panicking extractor abort the whole filesystem walk
#2332
opened Jul 30, 2026 by
alimony
Loading…
Fix panic parsing an npm alias with no version in
package-lock.json
#2331
opened Jul 30, 2026 by
alimony
Loading…
test: add symlink-escape tests for go.sum and npm-shrinkwrap.json
#2324
opened Jul 23, 2026 by
ZeroX-404
Loading…
fix(sbom): strip platform suffix from RubyGems versions in CycloneDX
#2313
opened Jul 20, 2026 by
knQzx
Loading…
[Sensitive Data Detector] US Passport Number
#2312
opened Jul 20, 2026 by
v1ktor0t
Collaborator
Loading…
Previous Next
ProTip!
Follow long discussions with comments:>50.