guacsec/guac

[feature] Ingestor document upload/ingest API 5 days ago

enhancement help wanted

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

Fix the post merge workflow 5 days ago

good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[feature] Explore wrapping the GraphQL API to allow it to be called via REST 5 days ago

enhancement good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

Fix lint errors across the repository 8 days ago

good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[feature] Implement fuzz tests 8 days ago

enhancement good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] PyPI packages 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] Maven Central 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] Gradle collector 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] Debian collector 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] Alpine Collector 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[collector] Golang module proxy collector 9 days ago

good first issue data-sources

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[feature] Try out ingestion of Zephyr renode SBOMs 9 days ago

enhancement good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[feature] Create a dashboard/tracker on backend testing with supported predicates 9 days ago

enhancement good first issue

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[bug] in-toto-golang is being deprecated, move to in-toto attestations 4 months ago

bug good first issue help wanted trust

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

[feature] Create gitpod configuration for self-hosted trial instance deployment 4 months ago

enhancement good first issue help wanted

guacsec/guac

1.5K

GUAC aggregates software security metadata into a high fidelity graph database.

Go

#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management

Open Issues Need Help