7 Pull requests merged by 3 people

• fix(output): correct unimportant vuln type

  #1427 merged Dec 10, 2024

• perf(maven): cache responses from Maven registries

  #1408 merged Dec 10, 2024

• chore: Merge V2 back into main

  #1434 merged Dec 10, 2024

• test(maven): remove the test of transitive scanning on native data source

  #1425 merged Dec 6, 2024

• chore: update golangci-lint to version 1.62.2

  #1426 merged Dec 6, 2024

• fix: set format to HTML when requesting serving resutls

  #1424 merged Dec 5, 2024

• fix: replace Debian package name with its source name

  #1422 merged Dec 5, 2024

10 Pull requests opened by 7 people

• chore(deps): update dependency webrick to v1.9.1

  #1429 opened Dec 8, 2024

• chore(deps): update golang docker tag to v1.23.4

  #1430 opened Dec 8, 2024

• chore(deps): update alpine docker tag to v3.21

  #1431 opened Dec 8, 2024

• chore(deps): bump the pip group across 1 directory with 4 updates

  #1435 opened Dec 10, 2024

• feat(maven): only fetch snapshots and releases when enabled

  #1436 opened Dec 10, 2024

• feat(guided remediation): non-interactive JSON output format (WIP)

  #1437 opened Dec 10, 2024

• refactor: Model migration

  #1438 opened Dec 11, 2024

• refactor(output): replace `HTMLReuslt` struct with `Result`

  #1439 opened Dec 11, 2024

• feat(performance): parallelize batch query sending

  #1440 opened Dec 11, 2024

• GitHub Actions, matrix support

  #1441 opened Dec 11, 2024

1 Issue closed by 1 person

• Unimportant vulnerabilities should be printed as unimportant, not uncalled

  #1419 closed Dec 10, 2024

4 Issues opened by 3 people

• Grace Period Based on Severity

  #1442 opened Dec 11, 2024

• Document the data and sources that OSV-Scanner uses

  #1433 opened Dec 9, 2024

• Add rate limit to requests sent to other services

  #1432 opened Dec 9, 2024

• Add Debian container scanning tests

  #1423 opened Dec 5, 2024

11 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• license checker not ignoring all dev deps

  #1298 commented on Dec 5, 2024 • 0 new comments

• HTML output format for scanning result

  #1274 commented on Dec 5, 2024 • 0 new comments

• Detecting yanked versions

  #1417 commented on Dec 9, 2024 • 0 new comments

• REQUEST: Support `uv.lock` lockfile used by uv

  #1406 commented on Dec 9, 2024 • 0 new comments

• Do mutliple BatchQueries requests in parallel

  #1411 commented on Dec 10, 2024 • 0 new comments

• Dependency Dashboard

  #6 commented on Dec 11, 2024 • 0 new comments

• Rpmdb support

  #255 commented on Dec 10, 2024 • 0 new comments

• feat: replace "skip-git" with "include-git", making git repository scanning not the default

  #1311 commented on Dec 10, 2024 • 0 new comments

• chore(deps): update workflows

  #1413 commented on Dec 11, 2024 • 0 new comments

• fix(deps): update osv-scanner minor

  #1414 commented on Dec 10, 2024 • 0 new comments

• ci: add a workflow to validate renovate config

  #1418 commented on Dec 10, 2024 • 0 new comments