Skip to content

Tags: ossf/package-analysis

Tags

rel-38

Toggle rel-38's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Add bun to the dynamic analysis image. (#1158)

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-37

Toggle rel-37's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Bump docker base image versions. (#1127)

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-36

Toggle rel-36's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Add user-agents to http requests sent by Package Analysis (#1018)

* Add a simple package for setting the user-agent in request headers.

Signed-off-by: Caleb Brown <calebbrown@google.com>

* Ensure user-agents are set when http requests are made.

Signed-off-by: Caleb Brown <calebbrown@google.com>

* Add "production" to the user agent for the production env.

Signed-off-by: Caleb Brown <calebbrown@google.com>

* Tweak the build command to better handle multi file main packages.

Signed-off-by: Caleb Brown <calebbrown@google.com>

---------

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-35

Toggle rel-35's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
add alias of scanned vulnerability (#955)

Signed-off-by: Max Fisher <maxfisher@google.com>

rel-34

Toggle rel-34's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Use os.Create to truncate the results file if a previous one exists. (#…

…940)

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-33

Toggle rel-33's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
add build recipe for creating e2e test images (#937)

Signed-off-by: Max Fisher <maxfisher@google.com>
Signed-off-by: Max Fisher <112151114+maxfisher-g@users.noreply.github.com>

rel-32

Toggle rel-32's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
create /root/.ssh directory in dynamic analysis Dockerfile (#901)

* create /root/.ssh directory in dynamic analysis Dockerfile

Signed-off-by: Max Fisher <maxfisher@google.com>

* add realistic mode to .ssh dir

Signed-off-by: Max Fisher <maxfisher@google.com>

---------

Signed-off-by: Max Fisher <maxfisher@google.com>

rel-31

Toggle rel-31's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Handle missing PyPI packages properly as well. (#881)

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-30

Toggle rel-30's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Fix Packagist JSON parsing to correctly parse dist fields. (#880)

* Fix Packagist JSON parsing to correctly parse dist fields.

Also handle the scenario where a download url is not available.

Signed-off-by: Caleb Brown <calebbrown@google.com>

* Fix an infinite loop and some minor nits.

Signed-off-by: Caleb Brown <calebbrown@google.com>

---------

Signed-off-by: Caleb Brown <calebbrown@google.com>

rel-29

Toggle rel-29's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
don't attempt staticanalysis results upload (and log a warning) when …

…there is no data (#878)

Signed-off-by: Max Fisher <maxfisher@google.com>