alpha-omega
alpha-omega copied to clipboard
ossf
Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
complete implementation of dynamic.py - need requirements of functionality for methods _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/31#discussion_r1039890663_
This code exists to import (en masse) results generated by the Analyzer, stored in a blob store. But any type of package can be used (not just npm). I think...
Additional metrics: - resolved findings? - updated findings? (say a finding was patched, but showed up again in a later report) _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/55#discussion_r1043831829_
get_intermediate_files() to be implemented. Issue Created _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/55#discussion_r1043799833_
todo for validation on blobs Add validation based on https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/55#discussion_r1043786252_
Manual reviews should follow the format from ossf/security-reviews and not just totally freeform. We should probably use the format we defined in ossf/security-reviews. Maybe even change this to require that....
Rationale: When processing logs, without a username or something similar, it may be hard to trace back to what happened. For now, it's intended to be run locally, so we...
to be implemented - requires definition of BaseEvidence requirements _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/31#discussion_r1039866459_
Ensure storage design is generic enough to allow easy support for other cloud providers storage products, i.e., Google, AWS.... _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/31#discussion_r1039905894_
to be implemented.- needs requirements and understanding of use cases / functionality _Originally posted by @Cyber-JiuJiteria in https://github.com/ossf/alpha-omega/pull/31#discussion_r1039898675_