All pull requests

Pull requests

• docs: add Safeguard to community integrations

  #7784·Safeguard-sh opened Oct 25, 2026·

  ·
  1

• Correlate Go vulnerabilities when OSS Index normalizes version prefix

  #7757·jha-pravin opened Oct 24, 2026Contributor·2 of 6 tasks·

  ·
  1

  6

• Fix: Resolve BOM-Link fragments to avoid applying VEX analysis project-wide

  #7694·jha-pravin opened Oct 15, 2026Contributor·2 tasks done·

  ·
  1

  1

• Prefer primary NVD CVSS metrics

  #7652·mjatin2007 opened Oct 12, 2026·6 tasks done·

  ·
  1

• Fix/arch qualifier matching

  #7645·Alimohamed147 opened Oct 9, 2026·2 of 6 tasks·

  ·

  · 5.3
  1

  5

• Accept all notification rule fields on creation

  #7627·volodymyr-jdev opened Oct 8, 2026Contributor·2 of 6 tasks·

  ·
  1

  7

• Evaluate component policies on package health

  #7586·Nihad74 opened Oct 5, 2026·3 of 4 tasks·

  ·
  1

  1

• Expose package health through the REST API v2

  #7585·Nihad74 opened Oct 5, 2026·3 of 4 tasks·

  ·
  1

• Resolve package health metadata from deps.dev and GitHub

  #7584·Nihad74 opened Oct 5, 2026·4 of 5 tasks·

  ·
  1

• ADR for feature "Package Health": OpenSSF Scorecard and repository metrics

  #7583·Nihad74 opened Oct 5, 2026·2 tasks done·

  ·
  1

• Export EPSS score as rating in VEX output

  #7561·jha-pravin opened Oct 4, 2026Contributor·2 tasks done·

  ·
  1

  1

• Original bom storage retention

  #7527·elias-chevere opened Sep 30, 2026·4 of 6 tasks·

  ·
  1

  21

• Support multiple licenses per component

  #7435·cartermitchellLM opened Sep 23, 2026·3 tasks·

  ·
  37

• Add project filtering for GET /api/v2/projects

  enhancement
  #7348·Nihad74 opened Sep 18, 2026·2 of 6 tasks·

  ·

  · 5.3
  17

  

• Adding vulnerability sorting by project count

  #7334·krishardy opened Sep 18, 2026·2 tasks done·

  ·
  2

• Match OS source packages in the internal vulnerability analyzer

  #7331·onestay opened Sep 17, 2026·2 of 6 tasks·

  ·
  1

  2

• Treat connection resets as transient regardless of exception type

  #7205·arjavdongaonkar opened Sep 1, 2026Contributor·2 tasks done·

  ·
  3

• Expose vulnerability attribution date to CEL policy expressions

  #7177·arjavdongaonkar opened Aug 30, 2026Contributor·2 of 3 tasks·

  ·
  1

  2

• Support expiry of vulnerability suppressions

  #7175·arjavdongaonkar opened Aug 30, 2026Contributor·3 of 4 tasks·

  ·
  1

  2

• Expose vulnerability analysis to CEL policy expressions

  #7173·arjavdongaonkar opened Aug 30, 2026Contributor·2 tasks done·

  ·
  1

  2

• Ignore letters appended to numeric version parts in VersionDistance

  #7170·arjavdongaonkar opened Aug 30, 2026Contributor·2 tasks done·

  ·
  1

  2

• Propose OAuth2 Proxy authentication

  #7152·jjj-n opened Aug 28, 2026·6 tasks done·

  ·
  24

• Support multiple configurable OSV data sources

  #7113·sahibamittal opened Aug 25, 2026Contributor·4 of 6 tasks·

  ·
  1

  18

• Add notifications for comments posted on vulnerability analyses

  #7112·Kortekaasy opened Aug 25, 2026·2 of 6 tasks·

  ·
  2

• Expose assigned project access teams.

  #7013·ElenaStroebele opened Aug 17, 2026Contributor·2 of 6 tasks·

  ·
  2