-
**Is your feature request related to a problem? If so, please give a short summary of the problem and how the feature would resolve it**
Having a supply chain analysis solution to identify potential …
-
`dependency-guard` does an awesome job of protecting projects from unwanted dependency changes.
But this way we know nothing about the actual dependency content and cannot protect against malicious…
amal updated
9 months ago
-
### Description
As a user of the Cacti npm packages I want to see on npmjs.com that the cacti packages are signed so that I have a layer of extra security against supply chain attacks that I can leve…
-
Looking to gather thoughts on how best to ensure I'm not the critical blocker on further changes to this library.
Unfortunately a temporary burnout with PdfPig seems to be more or less permanent an…
-
> In some of the instances that we checked, the Argo CD server was exposed and only required a username and a password for gaining access.
From: https://www.trendmicro.com/vinfo/us/security/news/vu…
-
### Issue Type
Maven dependencies
### Issue Description
There are *lots* of Maven dependencies which link to random servers across the world. Most of which have no disclosure statements about priva…
-
In hackathons there are often submissions that generate proofs, but can be misused to either prove different things or not uniquely prove what their solution proposes. Allowing a bad actor to either a…
jzaki updated
2 months ago
-
### Type
Documentation Issue Report
### What would you like to report?
I would like to report the following issue/feedback
I am not an ML person but feels that the OWASP Machine Learning Securit…
-
**Is your feature request related to a problem? Please describe.**
At the moment when results are reported, the report only includes the offending sink workflow/action file. For instance, if you run …
-
We have performed the static code analysis for the unmanaged c++ dll.
It reported the below error
Error BA2004 'ts2coreD.dll' is a native binary that directly compiles and links one or more obje…