guac icon indicating copy to clipboard operation
guac copied to clipboard

GUAC aggregates software security metadata into a high fidelity graph database.

Results 216 guac issues
Sort by recently updated
recently updated
newest added

Many GUAC cli commands (`guacone collect files`, `guacone query vuln`) use an HTTP client to connect to the GUAC GraphQL server. The GUAC server does not provide any sort of...

enhancement

**Describe the bug** Currently when using bulk ingestion, when part of the ingestion of a document fails it is not reported. This should error and be ingested again (placed back...

bug
priority

**Is your feature request related to a problem? Please describe.** The S3 collector currently supports collecting the entire bucket or a single file within the bucket. It would be helpful...

enhancement
good first issue
help wanted

**Is your feature request related to a problem? Please describe.** Currently, all the dependencies nodes are set to `unknown` for both SPDX and CDX. This makes it impossible to determine...

enhancement

In response to some issues brought up around IsDepedency #594 and #965, the following design doc is written to help address those issues. https://docs.google.com/document/d/1A2Fz0TLTsYAsJnTlztCdH05XnMM9llcpVqZtQa5Wt6M/edit During the use and development of...

bug

Batch ingestion results in performance improvements for moderately sized batches. Large batches have 2 possible causes for performance degradation: - graphQL query document is too large, resulting in long times...

enhancement
long-term

Add a release process documentation to GUAC Fixes #791

size/M

**Describe the bug** After ingesting a predicate with a time field of 0 (e.g. "0001-01-01T00:00:00Z"), im getting this message, which shouldn't be the case? I get error " ingestHasSourceAt.knownSince the...

bug

**Is your feature request related to a problem? Please describe.** [The GUAC ontology](https://docs.guac.sh/guac-ontology/) represents a graph of software artifacts, actors, and actions taken by actors. One of the most important...

enhancement

**Describe the bug** When running `go run ./cmd/guacone query vuln "urn:uuid:825c6001-17ba-4718-bb41-c1f8b66fdff0"`, this causes multiple connection reset errors to occur. ``` {"level":"error","ts":1710284706.855319,"caller":"cmd/vulnerability.go:439","msg":"error querying neighbor for vulnerability: Post \"http://localhost:8080/query\": read tcp [::1]:62501->[::1]:8080:...

bug