6 Pull requests opened by 2 people

• chore(deps): update cyclonedx-bom requirement from <5.0.0,>=4.0.0 to >=4.0.0,<7.0.0

  #1068 opened Apr 28, 2025

• chore(deps): update cyclonedx-python-lib[validation] requirement from <8.0.0,>=7.3.4 to >=7.3.4,<11.0.0

  #1069 opened Apr 28, 2025

• chore(deps): bump actions/download-artifact from 4.2.1 to 4.3.0

  #1070 opened Apr 28, 2025

• chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16

  #1071 opened Apr 28, 2025

• chore(deps): bump actions/setup-python from 5.4.0 to 5.6.0

  #1072 opened Apr 28, 2025

• build: add built-from-source semgrep dependency

  #1073 opened May 1, 2025

2 Issues closed by 1 person

• Add caching of discovered repositories

  #431 closed Apr 30, 2025

• Improve the commit finding approach

  #537 closed Apr 30, 2025

4 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat(security): Add package name typosquatting detection

  #1059 commented on May 1, 2025 • 7 new comments

• feat: add pypi attestation discovery

  #1067 commented on Apr 30, 2025 • 3 new comments

• chore: store provenance asset info

  #975 commented on Apr 27, 2025 • 0 new comments

• feat: add GitHub attestation discovery

  #1020 commented on May 1, 2025 • 0 new comments