-
We have some community interest to see an "official" spotbugs GitHub Action that can feed to GitHub Code Scanning for users that want to scan Scala.
https://github.com/jwgmeligmeyling/spotbugs-gith…
-
I run the code to create PR comment like this:
```
npx @security-alert/sarif-to-comment --title "Docker Image Scan Result" --commentUrl "$URL" \
--sarifContentOwner "$OWNER" \
…
-
I'm looking at ways go improve _engagement_ (around security) and one way is to involve my devs a little more in _everything security_.
Currently the results of a scan (can) go to the GitHub securi…
harmw updated
2 months ago
-
Platforms: linux
This test was disabled because it is failing in CI. See [recent examples](https://hud.pytorch.org/flakytest?name=test_save_with_without_initializer_include_initializer_no_fake_mode_n…
-
### Source issue
https://gitlab.com/gitlab-org/gitlab/-/issues/373113
**Describe the bug**
GitLab Customer reported that their Semgrep SAST job fails while "Creating report". They discovered …
-
### 🐛 Describe the bug
import torch
import torchaudio
from torch import nn
class DataCov(nn.Module):
def __init__(self):
super(DataCov, self).__init__()
self.transform…
-
Since recently we get the following error messages on SARIF upload in https://github.com/metabrainz/picard/ :
```
Error: Code Scanning could not process the submitted SARIF file:
rejecting SARIF,…
-
### 🐛 Describe the bug
Hi,
I tried to export a model with a PowerSpherical distribution (the https://github.com/nicola-decao/power_spherical/blob/master/power_spherical/distributions.py) and would b…
-
**User story.**
As a Developer, I would like to get issues displayed in Sonarqube if my openapi spec does not apply to the provided spectral ruleset.
**Is your feature request related to a problem?*…
-
# TL;DR
When you'r facing this issue in private repository please add
```yaml
permissions:
actions: read
```
to your workflow, or wait until this PR gets merged:
```[tasklist]
### Fixed …