-
People sometimes put test code together with the src code. Today we don't run those tests. It would be good if this could be configurable.
To turn it on globally, we could put an `:include-src-dirs…
-
When scanning the repository https://github.com/peak/s5cmd/tree/v2.2.2
The analyzer throws the error:
`ERROR org.ossreviewtoolkit.plugins.packagemanagers.python.Pip - Unable to determine dependencies…
-
When running the `Veracode IaC/Secrets Scanning` workflow and the vulnerability database is not accessible, we get a strange results.json not found error:
```
Run veracode/container_iac_secrets_sc…
-
Right now there is a long delay while emufun (re)scans a directory, especially when accessing a network mount from windows. It would be nice if it could scan the media directory in the background duri…
-
The plugin appears to include `/` as part of the Stellaris library on its own, and proceeds to scan for indexing the entire hard of the computer. This in turns leads (on a Mac) to multiple popups of "…
-
My project directory is like:
![image](https://github.com/user-attachments/assets/0f1b74f6-cb47-4405-b996-5d27cf72b187)
And i run the Actions like:
``` yaml
steps:
- uses: actio…
-
Tracking issue for:
- [ ] https://github.com/2lambda123/cisagov-Malcolm/security/code-scanning/74
-
**Describe the bug**
DependencyCheck is looking for files outside of scan directory when bcrypt is one of the npm packages.
**Version of dependency-check used**
`Dependency-Check Core version 6.0…
-
For both those that should be included and shouldn't be included:
https://github.com/GSA/federal-website-directory?tab=readme-ov-file#examples-of-what-should-be-included
Be sure to do justice …
-
When used with `compile_commands.json` clangd seem to ignore flag modifications from `.clangd` when (and only when) compiling module information, leading to module search issues
Given `compile_comm…