guac
guac copied to clipboard
guacsec
GUAC aggregates software security metadata into a high fidelity graph database.
https://github.com/ent/ent/issues/3125 Implies that the ent folks know they don't compile on 32-bit, and are not concerned (Asking about use case), but the issue is open, they maybe would accept a...
Hi Professor, I would like to add an input format such as Criticality Score to [Setup+Demo](https://github.com/guacsec/guac/blob/v0.0.1/SETUP.md) to inform the selection of tools for subsequent projects. So can I request to...
**Is your feature request related to a problem? Please describe.** At present, the layerID information is not being ingested by GUAC for both the SPDX and CDX formats. We would...
**Is your feature request related to a problem? Please describe.** Implement the connection logic for AWS Neptune DB with GUAC. **Describe the solution you'd like** Users should be able to...
**Describe the bug** I am opening this up here instead of the docs or visualizer repos since this issue probably could affect multiple areas of GUAC. Running the demos via...
We have updated some types in the inmem backend, and have left the neo4j backend behind. Let's keep a list here to remember: - [ ] IsOccurrence: subject type options...
RE: https://github.com/guacsec/guac/pull/779#discussion_r1176858639 We should document the steps we will take to generate a release. Ex: Create a tag, check the build, make a release in GitHub, etc.
It will be useful for debugging and also to determine if services are being clobbered to attribute to our collectors. This can probably be implemented by setting the ["User Agent"...
All parsers should implement the emission of [Identifier strings](https://github.com/guacsec/guac/blob/main/pkg/collectsub/collectsub/input/identifier_strings.go) through the [GetIdentifiers](https://github.com/guacsec/guac/blob/main/pkg/ingestor/parser/common/types.go#L40) function. An example of this is implemented in [SLSA](https://github.com/guacsec/guac/blob/main/pkg/ingestor/parser/slsa/parser_slsa.go#L272) Remaining work: - implement identifier strings for all parsers...
**Describe the bug** Discovered by [kurt-r2c](https://github.com/kurt-r2c) in original PR https://github.com/guacsec/guac/pull/896: The CycloneDX specification as of 1.4 does not require the component field in metadata, nor does it require the BOM...
