Open Issues Need Help
View All on GitHub containers: add Helm chart security-context fixture coverage about 2 hours ago
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
security: add negative fixtures for secret scanner placeholder and documentation suppression 3 days ago
enhancement help wanted good first issue area:testing area:security type:tests size:S difficulty:beginner priority:P2 static-analysis needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing area:architecture type:tests size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing area:architecture type:tests size:M difficulty:advanced priority:P2 needs-tests contributor-ready status:available area:registries
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:dependencies area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:dependencies area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing area:docs area:architecture type:tests type:docs size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:architecture type:feature size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
documentation help wanted good first issue area:docs type:docs size:S difficulty:beginner priority:P2 contributor-ready status:available area:registries
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available area:policies
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted good first issue area:reporting type:feature size:S difficulty:beginner priority:P2 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 static-analysis needs-tests contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing type:tests size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available area:registries
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:dependencies area:testing type:tests size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available area:vulnerabilities
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted good first issue area:testing type:tests size:S difficulty:beginner priority:P2 static-analysis needs-tests contributor-ready status:available area:github-actions
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
enhancement help wanted area:testing area:reporting type:tests size:M difficulty:intermediate priority:P2 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
documentation help wanted good first issue area:docs type:docs size:S difficulty:beginner priority:P2 contributor-ready status:available area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
documentation help wanted good first issue area:docs type:docs size:S difficulty:beginner priority:P2 contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.6] Add built-in trust policy model about 1 month ago
enhancement help wanted area:architecture type:feature size:S difficulty:intermediate priority:P2 needs-tests contributor-ready status:available area:policies phase:v0.6
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[medium][v0.5] Add SARIF report writer about 1 month ago
enhancement help wanted area:reporting type:feature size:M difficulty:intermediate priority:P1 needs-tests contributor-ready status:available area:sarif phase:v0.5
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.5] Add CLI SARIF output format about 1 month ago
enhancement help wanted good first issue area:reporting type:feature size:S difficulty:beginner priority:P2 needs-tests contributor-ready status:available area:cli area:sarif phase:v0.5
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.5] Add scan progress model about 1 month ago
enhancement help wanted area:architecture type:feature size:S difficulty:intermediate priority:P2 needs-tests contributor-ready status:available area:api phase:v0.5
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[medium][v0.4] Implement PyPI package metadata client about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 static-analysis needs-tests ecosystem:python contributor-ready status:available area:infrastructure area:registries phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[medium][v0.4] Add OSV advisory client about 1 month ago
enhancement help wanted area:security type:feature type:security size:M difficulty:intermediate priority:P1 static-analysis needs-tests contributor-ready status:available area:infrastructure area:vulnerabilities phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[large][v0.4] Add safe network lookup abstraction about 1 month ago
enhancement help wanted area:security type:feature type:security size:L difficulty:advanced priority:P1 static-analysis needs-tests contributor-ready status:available area:infrastructure phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.4] Add package registry metadata models about 1 month ago
enhancement help wanted good first issue area:dependencies type:feature size:S difficulty:beginner priority:P1 needs-tests contributor-ready status:available area:infrastructure area:registries phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[medium][v0.4] Implement NuGet package metadata client about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 static-analysis needs-tests ecosystem:nuget contributor-ready status:available area:infrastructure area:registries phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[medium][v0.4] Implement npm package metadata client about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 static-analysis needs-tests ecosystem:npm contributor-ready status:available area:infrastructure area:registries phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[large][v0.4] Add package freshness analyzer about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:L difficulty:advanced priority:P1 static-analysis needs-tests contributor-ready status:available area:registries phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[large][v0.4] Add dependency vulnerability analyzer about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:L difficulty:advanced priority:P1 static-analysis needs-tests contributor-ready status:available area:vulnerabilities phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.4] Surface vulnerability risks in reports about 1 month ago
enhancement help wanted good first issue area:reporting area:security type:feature size:S difficulty:beginner priority:P2 needs-tests contributor-ready status:available area:vulnerabilities phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[small][v0.4] Normalize package license metadata about 1 month ago
enhancement help wanted good first issue area:dependencies type:feature size:S difficulty:beginner priority:P2 needs-tests contributor-ready status:available area:licenses phase:v0.4
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Add dependency inventory artifact contracts about 1 month ago
enhancement help wanted good first issue area:dependencies area:architecture type:feature size:S difficulty:beginner priority:P1 phase:v0.3 static-analysis needs-tests contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Emit dependency inventory artifacts from the dependency analyzer about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Add synthetic dependency fixture layout about 1 month ago
documentation enhancement help wanted good first issue area:dependencies area:testing area:docs type:tests type:docs size:S difficulty:beginner priority:P2 phase:v0.3 contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Parse direct NuGet PackageReference dependencies safely about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:nuget contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Flag risky NuGet dependency versions about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:nuget contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Record NuGet package sources without network access about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:M difficulty:intermediate priority:P2 phase:v0.3 static-analysis needs-tests ecosystem:nuget contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Parse package.json dependency sections about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:npm contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Flag risky npm dependency versions about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:npm contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Record Node package manager and engine metadata about 1 month ago
enhancement help wanted good first issue area:dependencies type:feature size:S difficulty:beginner priority:P2 phase:v0.3 static-analysis needs-tests ecosystem:npm contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Flag npm install-time scripts for manual review about 1 month ago
enhancement help wanted area:dependencies area:security type:feature type:security size:M difficulty:intermediate priority:P2 phase:v0.3 static-analysis needs-tests ecosystem:npm contributor-ready status:available area:analyzers
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Parse Python requirements.txt dependencies about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:python contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Parse pyproject.toml and Pipfile dependencies conservatively about 1 month ago
enhancement help wanted area:dependencies type:feature size:L difficulty:advanced priority:P2 phase:v0.3 static-analysis needs-tests ecosystem:python contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Add dependency summary to Markdown reports about 1 month ago
enhancement help wanted good first issue area:dependencies area:reporting type:feature size:M difficulty:beginner priority:P2 phase:v0.3 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Add top recommended actions to Markdown reports about 1 month ago
enhancement help wanted good first issue area:reporting type:feature size:M difficulty:beginner priority:P2 phase:v0.3 needs-tests contributor-ready status:available
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security
[v0.3] Support NuGet Central Package Management versions about 1 month ago
enhancement help wanted area:dependencies type:feature size:M difficulty:intermediate priority:P1 phase:v0.3 static-analysis needs-tests ecosystem:nuget contributor-ready status:available area:analyzers area:rules
Evidence-based static repository trust, security, and maintainability scanner
C#
#csharp#dependency-analysis#dotnet#github-actions#oss-security#repository-analysis#security-tools#static-analysis#supply-chain-security