Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/devops-kung-fu/bomber

Scans Software Bill of Materials (SBOMs) for security vulnerabilities
https://github.com/devops-kung-fu/bomber

build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.5

dependabot[bot] opened this pull request 5 days ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.4

dependabot[bot] opened this pull request 7 days ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.3

dependabot[bot] opened this pull request 18 days ago
Fixes issue with JSON renderer

djschleen opened this pull request 21 days ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.36.1

dependabot[bot] opened this pull request about 1 month ago
build(deps): bump github.com/google/osv-scanner from 1.8.5 to 1.9.2

dependabot[bot] opened this pull request about 1 month ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.5

dependabot[bot] opened this pull request about 1 month ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.4

dependabot[bot] opened this pull request about 2 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.36.0

dependabot[bot] opened this pull request about 2 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.3

dependabot[bot] opened this pull request 2 months ago
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0

dependabot[bot] opened this pull request 2 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.2

dependabot[bot] opened this pull request 2 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.35.7

dependabot[bot] opened this pull request 2 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.1

dependabot[bot] opened this pull request 2 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.2

dependabot[bot] opened this pull request 2 months ago
DJ WIP

djschleen opened this pull request 2 months ago
feat: add support for alternative Snyk API URLs

mcombuechen opened this pull request 3 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.16.0

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.35.6

dependabot[bot] opened this pull request 3 months ago
build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.1.0 in /.github/workflows

dependabot[bot] opened this pull request 3 months ago
Update Go version in devcontainer, add ProviderURL to credentials, and enhance Snyk integration

djschleen opened this pull request 3 months ago
build(deps): bump github.com/google/osv-scanner from 1.8.5 to 1.9.1

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.32.5

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.32.3

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.1

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.32.2

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.32.1

dependabot[bot] opened this pull request 3 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.32.0

dependabot[bot] opened this pull request 4 months ago
Scanning with Github provider not working

rjuengling-hf opened this issue 4 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to 6.6.0

dependabot[bot] opened this pull request 4 months ago
build(deps): bump github.com/google/osv-scanner from 1.8.5 to 1.9.0

dependabot[bot] opened this pull request 4 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.2 to 2.15.3

dependabot[bot] opened this pull request 4 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.30.3 to 1.31.0

dependabot[bot] opened this pull request 4 months ago
Update version to 0.5.1

djschleen opened this pull request 4 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.15.1 to 2.15.2

dependabot[bot] opened this pull request 4 months ago
Speed increase for OSV, GitHub provider work, Documentation Update

djschleen opened this pull request 4 months ago
Update go-resty/resty/v2 to v2.15.1

djschleen opened this pull request 4 months ago
Adds GitHub Advisory Database as a provider

djschleen opened this pull request 4 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.2 to 1.30.3

dependabot[bot] opened this pull request 4 months ago
Bomber not correctly detecting versions from CycloneDX BOM resulting in false positives

rvesse opened this issue 4 months ago
OSV Provider Optimizations

djschleen opened this issue 4 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.14.0 to 2.15.1

dependabot[bot] opened this pull request 4 months ago
False negative scans when using bomber on SBOM with Cyclone CDX SpecVersion 1.6

clobraico-hf opened this issue 4 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.30.0

dependabot[bot] opened this pull request 4 months ago
build(deps): bump github.com/go-resty/resty/v2 from 2.14.0 to 2.15.0

dependabot[bot] opened this pull request 4 months ago
build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0 to 0.9.1

dependabot[bot] opened this pull request 4 months ago
Vulnerability Database management

anthonyharrison opened this issue 5 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.29.2

dependabot[bot] opened this pull request 5 months ago
GitHub Security Advisory Provider

djschleen opened this issue 5 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.29.1

dependabot[bot] opened this pull request 5 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.29.0

dependabot[bot] opened this pull request 5 months ago
Added multiple output options

AndriyDmytrenko opened this pull request 5 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.28.3

dependabot[bot] opened this pull request 5 months ago
Clone transport

myhops opened this pull request 5 months ago
JSON output produces invalid json document

AndriyDmytrenko opened this issue 5 months ago
build(deps): bump github.com/sashabaranov/go-openai from 1.28.1 to 1.28.2

dependabot[bot] opened this pull request 5 months ago
build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 in /.github/workflows

dependabot[bot] opened this pull request 5 months ago
compitibility with cyclonedx-maven-plugin:2.8.1

ZheSun88 opened this issue 6 months ago
Get missing or enhance licenses from ClearlyDefined

djschleen opened this issue 7 months ago
Please consider adopting OpenSSF Scorecard

andrewpollock opened this issue 7 months ago
Shows no package shown after passing Json File.

Shweta4398 opened this issue 7 months ago
Bomber reporting OSV vulnerabilities on package versions that aren't in SBOM

ppeters0502 opened this issue 7 months ago
feat: support markdown as a renderer output format

scottmckendry opened this pull request 8 months ago
Feature Request

nhopkins19 opened this issue 8 months ago
build(deps): bump github.com/package-url/packageurl-go from 0.1.2 to 0.1.3

dependabot[bot] opened this pull request 9 months ago
build(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 in /.github/workflows

dependabot[bot] opened this pull request 9 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.4 to 6.5.9

dependabot[bot] opened this pull request 9 months ago
build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0

dependabot[bot] opened this pull request 9 months ago
build(deps): bump github.com/kirinlabs/HttpRequest from 1.1.1 to 1.1.2

dependabot[bot] opened this pull request 10 months ago
Make Snyk API URL configurable

moxli opened this issue 10 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.4 to 6.5.8

dependabot[bot] opened this pull request 10 months ago
correct Loader object shadowing to correct SEGFAULT

pbailey-hf opened this pull request 10 months ago
error retrieving vulnerability data (400 Bad Request)

ArwynFr opened this issue 10 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.4 to 6.5.6

dependabot[bot] opened this pull request 10 months ago
Openai report output

djschleen opened this pull request 10 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.4 to 6.5.5

dependabot[bot] opened this pull request 11 months ago
HTML report generation fails silently when processing entire folder containing an "empty" SBOM

henning-meinhardt opened this issue 11 months ago
build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0

dependabot[bot] opened this pull request 11 months ago
Fixes 0xProto Font in devcontainer

djschleen opened this pull request 11 months ago
Extended devcontainer functionality

djschleen opened this pull request 11 months ago
--ignore-file option not working

sssylvester opened this issue 11 months ago
Adds devcontainer

mirxcle opened this pull request 11 months ago
Delete .github/workflows/codeql.yml

djschleen opened this pull request 11 months ago
Delete .github/workflows/code-analysis.yaml

djschleen opened this pull request 11 months ago
Create codeql.yml

djschleen opened this pull request 11 months ago
Update go-quality.yml

djschleen opened this pull request 11 months ago
Update go-quality.yml

djschleen opened this pull request 11 months ago
Toolchain patch

mirxcle opened this pull request 11 months ago
OpenAI integration and Bug Fixes

djschleen opened this pull request 11 months ago
build(deps): bump github/codeql-action from 2 to 3 in /.github/workflows

dependabot[bot] opened this pull request 11 months ago
Create code-analysis.yaml

djschleen opened this pull request 11 months ago
bomber doesn't detect packages

davidmthomsen opened this issue 12 months ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.4.9 to 6.5.4

dependabot[bot] opened this pull request 12 months ago
build(deps): bump actions/setup-go from 4 to 5 in /.github/workflows

dependabot[bot] opened this pull request about 1 year ago
build(deps): bump actions/checkout from 3 to 4 in /.github/workflows

dependabot[bot] opened this pull request about 1 year ago
build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.4.9 to 6.5.3

dependabot[bot] opened this pull request about 1 year ago
build(deps): bump github.com/jarcoal/httpmock from 1.3.0 to 1.3.1

dependabot[bot] opened this pull request about 1 year ago
build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0

dependabot[bot] opened this pull request about 1 year ago
build(deps): bump goreleaser/goreleaser-action from 4.2.0 to 5.0.0 in /.github/workflows

dependabot[bot] opened this pull request about 1 year ago
Adding renderer

nhopkins19 opened this pull request about 1 year ago