-
BPO | [30458](https://bugs.python.org/issue30458)
--- | :---
Nosy | @gpshead, @jaraco, @vstinner, @larryhastings, @benjaminp, @ned-deily, @ambv, @vadmium, @serhiy-storchaka, @zhangyangyu, @stratakis, …
-
Github recommend that you audit for both unwanted pull requests and abuse by the GITHUB_TOKEN.
1. Assess commits made during the bug window, February 4,2021 18:42 UTC to February 5, 2021 13:35 UTC.…
-
Hello, 1st of all, loving Trivy so far. I have a question though - when I run a scan using [Dependency-Check](https://github.com/jeremylong/DependencyCheck) I get a large set of vulnerabilities, see b…
-
Hi there,
after replacing the base image I've started having this problem:
```
Run azure/container-scan@v0
Could not find allowedlist file.
/usr/bin/tar --version
tar (GNU tar) 1.30
Copyright (…
-
Hello,
I work for the group LINAGORA, and we have the project `LinInfoSec` to build a notification tool to monitor CVE publications relating to a given list of software, and integrate it with our t…
-
It looks to me like the Privileges Required (PR) CVSS attribute is not modeled in the automatic vulnerabilities.
For example:
`NLNNVulnerability`, `NLLNVulnerability` and `NLHNVulnerability` be…
-
TODO: Parameter or something to show known vulnerabilties for Core and Extensions
whoot updated
3 years ago
-
one of the bigger features of the quay.io registry is the built in vulnerabilty scan which checks container images for unpatched flaws.
As of today, april 8 2021, it complains about 2 high, 25 medi…
-
In order to achieve reproducible builds vgo keeps using specific package versions until an explicit upgrade is done. IMHO this is an excellent default but I'm worried about insecure package versions a…
-
Report received that npm install is reporting 3 high sev vulnerabilities during install. Investigate dependencies.