guac
guac copied to clipboard
GUAC aggregates software security metadata into a high fidelity graph database.
Now the index is created by `guacone` so it should be handled by the next step already. Signed-off-by: Mihai Maruseac
Welcome! This thread is on expressing interest in contributing to GUAC! We are glad to welcome our fellow open source contributors! As the project is starting up, we will be...
Currently importing is a bit slower than expected with direct queries. According to neo4j docs, CSV importing seems to provide better performance for ingesting our data. This issue is around...
Create an end to end command line tool to take in a folder of documents and populate a graph for debugging and to show end to end flow.
It is important that folks that come by to test it out do not run into inconsistencies of the [POC documentation ](https://github.com/guacsec/guac/blob/main/SETUP.md). It would be helpful to have regression tests...
Changes the merge method from "squash" to "rebase". The project settings may need to be updated to allow this to happen. Fixes #180
AddRootPackage doesn't handle simple purls. I.e. `pkg:pypi/[email protected]`. This causes a failure at parsing, and doesn't seem to handle all variations from the [PURL_SPEC](https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst). This method should handle the different variations...
Can we please disable the Kodiak Bot merge feature for the following reasons? 1. The maintainers wants linear history in the PR, so this doesn't meet that minimum requirements 2....
## 📝 Description Adds xml support for the CycloneDX guesser, processor, and ingestor. Closes https://github.com/guacsec/guac/issues/102