Robert Grant

Results 28 issues of Robert Grant

It's quite possible that the group management for some applications may happen mostly inside the application itself - not every organisation has the slick automation (xor the slow bureacracy) to...

JIRA has a great workflow like this: 1) Project administrator has a login, and enters prospective users' email addresses into the system. 2) Each email address is now associated with...

I've created a subfolder inside my `templates` directory called `fullauth`, to hold Jinja2 equivalents of the built in templates. Inside my `__init__.py`, I've added the following line, underneath `config =...

enhancement
design
hacktoberfest

## Short Description Prepackage the software as a Docker image, hosted here on ghcr.io. ## Select Category - [x] Packaging ## **Describe the Update** Build and upload the Docker image...

new feature

Fixes #3026 ### Tasks * [x] Reviewed [contribution guidelines](https://github.com/nexB/scancode-toolkit/blob/develop/CONTRIBUTING.rst) * [x] PR is descriptively titled 📑 and links the original issue above 🔗 * [x] Tests pass -- look for...

### Proposed Behavior: Issue to explore DependencyTrack being able to indicate whether a dependency has a [Sigstore](https://www.sigstore.dev) signature detected. To better cyber risk assess the software supply chain. See also:...

enhancement

A funny one: - We have a 3-node causal-clustered neo4j setup - I've changed the routing protocol to be `bolt+routing` - We're using Neomodel with `@db.transaction` We're getting intermittent errors...

enhancement

Just based on this section: > JinjaSQL is not meant to replace your ORM. ORMs like those provided by SQLAlchemy or Django are great for a variety of use cases,...

[Sigstore](https://www.sigstore.dev) exists to verify whether a deployed dependency was signed by the author. Detecting whether a detected dependency was signed by Sigstore would allow downstream tools such as DependencyTrack to...

proposed core enhancement
help wanted

**What happened** Outputting a CycloneDX SBOM does not pick up the sole dependency's licence in its output. **What you expected to happen**: Given I can see the dependency inside `node_modules`...

bug
enhancement