Benji Visser comments

Results 53 comments of


                                            Benji Visser

Parse javascript dependency trees

@wagoodman ready now

Parse javascript dependency trees

dont have the time to work on this anymore and get it over the line, but someone else can pick it up! will leave it in your hands @wagoodman

Invoke known tools to gather build-time dependency information

Instead of shelling out to cli tools, would you consider building parsers directly inside syft? It wouldn't require one to depend on the presence of local tooling, and I could...

Invoke known tools to gather build-time dependency information

I suppose what I meant is only shelling out to tools where necessary (in the case that go mod graph is truly the only way to see the dependency tree...

Add dotnet deps parsing

@DmitriyLewen ready for another review

xeol fails if sbom.xml is missing some xml tags

@damian-wnukowski-worldline can you let me know if this is resolved with the latest version of xeol v0.10.0

[Request] Self Hosted Option

:wave: @zero77 Could you clarify what you mean by self hosting the server? The CLI works fetches all EOL database information from S3 and stores it locally before it runs...

ENH: `--no-color` CLI argument option to remove color for better automation/pipeline output

Is this just the install script displaying the garbage color strings? Or does it happen with usage of `xeol` cli as well? we do check if the terminal supports colors...

Add dates when a package became deprecated

Hi @joelverhagen thank you for the detailed response, I really appreciate it. The "vulnerable on" timestamp it out of scope for what we want to do. Im not familiar with...

[Feature Request] Update `@prisma/client` to use the generated types

@chrishoermann did you get a chance to look into this? If you give me some pointers I could work on this.