project-kb

project-kb copied to clipboard

Prospector assuremoss

1

Since uvicorn default docker images are not arm64 compatible I re-created it from scratch using the official python-slim image, final size is also reduced by approx. 500MB and python version...

sacca97

Bumps [numpy](https://github.com/numpy/numpy) from 1.19.4 to 1.22.0. Release notes Sourced from numpy's releases. v1.22.0 NumPy 1.22.0 Release Notes NumPy 1.22.0 is a big release featuring the work of 153 contributors spread...

dependabot[bot]

The current implementation supports concurrent jobs, but no easy way to create and monitor them, and to consume their results. Also, the available reports types do not allow the user...

copernico

[WIP] Merging prospector-assuremoss back to master

1

copernico

[import] implement extraction of fix-commits from NVD feeds

2

The NVD does contain fix-commits for some CVEs: extract them and represent them as statements.

copernico

Bumps [fastapi](https://github.com/tiangolo/fastapi) from 0.65.1 to 0.65.2. Release notes Sourced from fastapi's releases. 0.65.2 Security fixes 🔒 Check Content-Type request header before assuming JSON. Initial PR #2118 by @​patrickkwang. This change...

dependabot[bot]

Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...

dependabot[bot]

add option `--fixed-tag` and `--fixed-version`

3

- add option `--fixed-tag` and `--fixed-version` so that the left-hand version/tag of an interval is inferred by the tool and used automatically (with a visible message indicating which tag-version is...

copernico

if the backend only return a list of Nones, it is still reported as preprocessed commit

3

I do not know whether this is the expected behavior, but it seems wrong to consider `None`s as `raw_commit_data`. 

geryxyz

Solves issue #284

amilankovich-slab