elad_pt

apt update failed due to signing issue

1

**Describe the bug** `apt update` is failing in Linux distros due to the following error: ``` E: Failed to fetch https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease Clearsigned file isn't valid, got 'NOSPLIT' (does the network...

Due to GitHub API limitations, we are querying pages 1-10 and changing the query start and end page all the time. Currently, we are printing. The relational page number (1-10)...

Add option to scan a specific repo

2

For now, We support two options 1) Scanning a specific organization 2) Scanning the entire GitHub by star counts We need an option to scan a specific repo in case...

**Is your feature request related to a problem? Please describe.** Yes, when querying composite actions, I would like to filter to inputs with a specific value. We don't have that...

After finding a vulnerable workflow, each query should have a follow-up action to mitigate the risk. For example, After finding a workflow that is vulnerable to issue title injection, we...

Split modules logic

1

# Module names could be confusing Imports such as `from src.config.config import ...` or `from src.downloader.downloader import ...` could confuse and we should split their logic between multiple files. For...

Print artifact digest after build process is completed

6

I think it would be beneficial to add artifact digests to the Successfully built message. For instance: ``` bash Successfully built test-0.0.0.tar.gz@sha256:960b9adda66023aed657c0da9626a6b8de71e433843181a5397431465adb57a7 and test-0.0.0-py3-none-any.whl@sha256:c856716babc6d603769f6b4f1a7122a61b870e7f627b0e2b4aa8f48b712c7770 ```  Including the digest information...

Support Azure Pipelines OIDC

4

**Description** By sending a `POST` request to `$SYSTEM_OIDCREQUESTURI?api-version=7.1-preview.1` along with the following auth header `Authorization: Bearer $SYSTEM_ACCESSTOKEN` will return the following OIDC token: ``` json { "jti": "UUID", "sub": "p://example/test-oidc/test-oidc",...