Issues

• Import container/helm vulnerabilities from ArtifactHub.io

  backlogdatasourceenhancement
  google/osv.dev#2666 · Filter by author taraspos opened on Sep 24, 2024
  1

• Support git-lfs for git sources.

  backlogenhancement
  google/osv.dev#2647 · Filter by author oliverchang opened on Sep 24, 2024
  3

• Evaluate and enable cherrypick detection for cve-osv

  backlogdata qualityenhancement
  google/osv.dev#2577 · Filter by author oliverchang opened on Sep 9, 2024
  5

• Combine Alpine Security Issue Tracker into OSV

  backlogdatasourceenhancement
  google/osv.dev#2567 · Filter by author hogo6002 opened on Sep 4, 2024
  3

• CI/CD: Add GitHub Actions Workflow to validate Swagger documentation

  apibacklogcleanupdocumentation
  google/osv.dev#2487 · Filter by author andrewpollock opened on Aug 18, 2024

• The importer does not honour ignore_patterns for REST sources

  backlogbug
  google/osv.dev#2436 · Filter by author andrewpollock opened on Aug 1, 2024
  1

• Invalidate last_update_date when source changes

  backlogenhancementinfratechdebt
  google/osv.dev#2424 · Filter by author oliverchang opened on Jul 30, 2024
  2

• Solution hashes for a vulnerability lies in an external fork

  backlogdata quality
  google/osv.dev#2415 · Filter by author yashrsharma44 opened on Jul 24, 2024
  5

• Git analysis: relax branch computation

  backlogenhancement
  google/osv.dev#2404 · Filter by author oliverchang opened on Jul 22, 2024
  1

• OSV.dev can't match deleted versions of packages

  backlogbug
  google/osv.dev#2407 · Filter by author maaaaz opened on Jul 21, 2024
  14

• Missing PURL converters

  backlogcleanupdata qualitygood first issue
  google/osv.dev#2402 · Filter by author michaelkedar opened on Jul 18, 2024
  6

  

• Missing fixed attribute in libucl bug

  data quality
  google/osv.dev#2353 · Filter by author inferno-chromium opened on Jun 30, 2024
  15

• Document the treatment of the GIT ecosystem

  documentation
  google/osv.dev#2329 · Filter by author yashrsharma44 opened on Jun 19, 2024
  5

• GitHub Actions version matching

  backlogdatasourceenhancement
  google/osv.dev#2308 · Filter by author thepwagner opened on Jun 12, 2024
  7

• Advisories deleted from REST sources not being marked as withdrawn

  backlogenhancementinfra
  google/osv.dev#2294 · Filter by author oliverchang opened on Jun 7, 2024
  1

• Support commit enumeration on pathologically large repositories

  backloginfraworker
  google/osv.dev#2293 · Filter by author andrewpollock opened on Jun 7, 2024
  1

• combine-to-osv: Include the CWE(s) from the underlying CVE in the resultant OSV record

  backlogenhancement
  google/osv.dev#2292 · Filter by author timothee-chauvin opened on Jun 6, 2024
  4

• Improve the UX of failed vulnerability retrieval by the API

  apibacklogdocumentation
  google/osv.dev#2235 · Filter by author andrewpollock opened on May 23, 2024
  4

• Bisection should not produce zero-length commit ranges

  backlogbugoss-fuzzworker
  google/osv.dev#2232 · Filter by author andrewpollock opened on May 23, 2024
  4

• nvd-cve-osv: OpenSSL versions do not normalize correctly

  backlog
  google/osv.dev#2220 · Filter by author andrewpollock opened on May 17, 2024
  1

• OSV.dev downstream users have a clearly defined user journey to make corrections to OSV records served by OSV.dev with minimal overhead by all parties

  backlog
  google/osv.dev#2191 · Filter by author andrewpollock opened on May 9, 2024
  4

• OSV.dev downstream users have a way to reason about records that are absent from OSV.dev because of failure to meet the minimum quality bar

  backlog
  google/osv.dev#2190 · Filter by author andrewpollock opened on May 9, 2024
  1

• The minimum quality bar is sustainably enforced by OSV.dev

  backlog
  google/osv.dev#2188 · Filter by author andrewpollock opened on May 9, 2024
  2

• Tooling exists for OSV record creators to validate that they meet the minimum quality bar at record creation time

  backlog
  google/osv.dev#2187 · Filter by author andrewpollock opened on May 9, 2024
  6

• Withdrawing OSV reports is too heavyweight

  oss-fuzz
  google/osv.dev#2177 · Filter by author davidben opened on May 8, 2024
  5