synapse-ce good first issues (Go)

Epic: risk-based remediation SLA and finding lifecycle 2 months ago

enhancement help wanted risk-management

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(cli): retain Code Quality source snapshots from CLI analyses 3 months ago

enhancement good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): VB.NET rule pack (shares the C# .NET catalog) 3 months ago

enhancement help wanted needs-grammar

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Ruby/Rails rule pack (+ tree-sitter Ruby grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): PHP rule pack (+ tree-sitter PHP grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Swift rule pack (+ tree-sitter Swift grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Kotlin rule pack (+ tree-sitter Kotlin grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): HTML rule pack (correctness + accessibility) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): CSS rule pack 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): XML rule pack (XXE + well-formedness) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C++ rule pack (+ tree-sitter C++ grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C rule pack (+ tree-sitter C grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C# rule pack (+ tree-sitter C# grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Azure Resource Manager rule pack (misconfig analyzer) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Scala rule pack (+ tree-sitter Scala grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Rust rule pack (+ tree-sitter Rust grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Go rule pack (+ tree-sitter Go grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): IPython Notebook rule pack (reuses Python over cells) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Python rule pack 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Docker rule pack (misconfig analyzer) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): language rule packs — tracker + clean-room authoring methodology (L0) 3 months ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Kubernetes rule pack - manifest hardening (misconfig analyzer) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Secrets detectors - extend the scanner to parity (~40) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Text rule pack (any-file hygiene + Trojan Source) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): JavaScript/TypeScript rule pack (+ TS grammar) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): CloudFormation rule pack (misconfig analyzer) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Node.js rule pack 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Java rule pack 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Terraform rule pack - AWS/Azure/GCP misconfig (misconfig analyzer) 3 months ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(cli): add `synapse-cli doctor` — pre-scan preflight (what can/can't be analyzed + how to unlock full coverage) 4 months ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Release engineering: goreleaser + tagged releases with prebuilt binaries 4 months ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for LDAP injection (CWE-90) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform rule: security group egress open to 0.0.0.0/0 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a CHANGELOG.md 4 months ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add CI status and Go Report Card badges to the README 4 months ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add CloudFormation misconfig scanning 4 months ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform rule: S3 bucket versioning disabled 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for insecure temporary file (CWE-377) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for ReDoS (CWE-1333) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for XPath injection (CWE-643) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Conan conan.lock lockfile parser (SCA, C/C++) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Julia Manifest.toml lockfile parser (SCA) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add an R renv.lock lockfile parser (SCA) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Reusable GitHub Action for the Synapse scan gate 4 months ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Publish a synapse-cli container image to GHCR on release 4 months ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Conda environment.yml lockfile parser (SCA) 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Docs: add GitLab CI and Jenkins pipeline examples 4 months ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Show the fixed version in SARIF SCA results (code-scanning remediation) 4 months ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform misconfig rule: unencrypted EBS volume 4 months ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

KKloudTarus/synapse-ce

Open Issues Need Help