Skip to content

Issues: microsoft/component-detection

Component Detection v5.0 tracking issue
#1135 opened May 23, 2024 by cobya
Open 1
Component Detection Community Meetings
#47 opened Jan 20, 2022 by JamieMagee
Open
Dependency Dashboard
#139 opened Jun 29, 2022 by renovate bot
Open
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

78 Open 171 Closed
78 Open 171 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

CondaLock: Stack overflow issue in github actions
#1334 opened Dec 24, 2024 by vijeshkumarr
1
Go detector overreports dependencies, sometimes causing false vuln claims that are unusually difficult to "upgrade anyway"
#1333 opened Dec 21, 2024 by dagood
Poetry detector fails on specific use case due to multiple sources for a package being specified in poetry.lock file
#1323 opened Dec 10, 2024 by FernandoRojo
Non-existent filepaths reported in manifest.json
#1312 opened Nov 21, 2024 by winstliu
fix(linux): add logic to parse the upstream package name
#1286 opened Oct 28, 2024 by FernandoRojo
Detection is getting hung up on macOS
#1258 opened Oct 2, 2024 by DaveTryon
3
NullReferenceException in NpmLockfileDetectorBase
#1239 opened Aug 27, 2024 by gbtec-georgs
Conan 2.0 support is missing
#1228 opened Aug 19, 2024 by MichielJazzy1
Go/GoWithReplace skipping over go.mod files in child directories
#1218 opened Aug 2, 2024 by FernandoRojo
Detect app-centric/"general purpose" package managers
#1214 opened Jul 30, 2024 by jbne
Purl is incorrect when the component name contains uppercase letter
#1209 opened Jul 25, 2024 by kennylam91
Nuget Detection: Nuspec Version as Variable $version$ (Dynamic Versioning) detector:nuget The NuGet detector type:feature Feature (new functionality)
#1191 opened Jul 5, 2024 by RushabhBhansali
Investigate usage of --use-feature=fast-deps in pip install --report detector:pip The pip detector status:blocked Issue is blocked by another issue or external requirement type:feature Feature (new functionality)
#1182 opened Jun 18, 2024 by cobya
1
Invalid purls when scanning Rust(cargo) repository detector:rust The Rust Cargo detector good first issue Good for newcomers status:ready Ready to start implementation type:bug Bug fix of existing functionality
#1172 opened Jun 13, 2024 by kennylam91
1
Investigate --no-compile with PipReport detector detector:pip The pip detector good first issue Good for newcomers status:ready Ready to start implementation type:refactor Refactoring or improving of existing code
#1149 opened Jun 4, 2024 by cobya
1
Request: Add support for Python Pipenv to read packages from Pipfile/Pipfile.lock detector:pip The pip detector status:requirements Full requirements are not yet known, so implementation should not be started type:feature Feature (new functionality)
#1143 opened May 29, 2024 by felickz
1
Component Detection v5.0 tracking issue breaking change Breaking change, requires major version bump .NET Pull requests that update .net code type:refactor Refactoring or improving of existing code
#1135 opened May 23, 2024 by cobya
@cobya
1
Standardize detector failure reporting and exception handling breaking change Breaking change, requires major version bump .NET Pull requests that update .net code type:refactor Refactoring or improving of existing code
#1134 opened May 23, 2024 by cobya
@cobya
Feature Request: NuGet packages.lock.json lock file detector .NET Pull requests that update .net code status:requirements Full requirements are not yet known, so implementation should not be started type:feature Feature (new functionality)
#1089 opened Apr 26, 2024 by felickz
Request: add support for VB6 .NET Pull requests that update .net code status:requirements Full requirements are not yet known, so implementation should not be started type:feature Feature (new functionality)
#1088 opened Apr 26, 2024 by SimonvanAs
3
Add osv-scanner.toml configuration to verification tests folders good first issue Good for newcomers status:ready Ready to start implementation type:ci Build or repository configuration type:tests Unit/Verification tests
#1073 opened Apr 18, 2024 by cobya
No Detector for Scala's SBT (Simple Build Tool) detector:maven The Maven detector status:requirements Full requirements are not yet known, so implementation should not be started type:feature Feature (new functionality)
#1057 opened Apr 8, 2024 by amohan16
4
package detector warning detector:pip The pip detector status:waiting-on-response Waiting on a response/more information from the user type:bug Bug fix of existing functionality
#1043 opened Mar 21, 2024 by zongtaol
1
Why are NuGet project references not included?
#1029 opened Mar 13, 2024 by Whathecode
4
Rust: allow specific features to be set for RustCLI detector detector:rust The Rust Cargo detector type:feature Feature (new functionality)
#1001 opened Feb 1, 2024 by FernandoRojo
1
@FernandoRojo
ProTip! Find all open issues with in progress development work with linked:pr.