Skip to content

Issues: Nix-Security-WG/nix-local-security-scanner

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

26 Open 23 Closed
26 Open 23 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

False positive: CVE-2019-14860, CVE-2019-14900 in fuse false-positive
#1 opened Dec 19, 2023 by raboof
False positive: CVE-2015-1773 in flex false-positive
#5 opened Dec 15, 2023 by raboof
Ingest repology CPE bindings for more accurate matching enhancement New feature or request
#13 opened Dec 15, 2023 by raboof
Cache parsed NVD collection enhancement New feature or request
#6 opened Dec 15, 2023 by raboof
Cache web results per advisory id enhancement New feature or request
#7 opened Dec 15, 2023 by raboof
False positive: CVE-2023-45853 in zlib false-positive
#14 opened Dec 15, 2023 by raboof
False positive: CVE-2019-0190 in openssl false-positive
#16 opened Dec 14, 2023 by raboof
Cache inventory enhancement New feature or request
#10 opened Dec 11, 2023 by raboof
Smarter backoff when hitting NVD rate limits enhancement New feature or request
#8 opened Dec 11, 2023 by raboof
Improve performance enhancement New feature or request
#9 opened Dec 11, 2023 by raboof
Exclude particular CPEs from version and package name matching enhancement New feature or request
#2 opened Dec 8, 2023 by raboof
False positive: CVE-2015-2987 in ed false-positive
#4 opened Dec 8, 2023 by raboof
False positive: CVE-2022-26691 in CUPS false-positive
#3 opened Dec 8, 2023 by raboof
False positive: CVE-2023-3341 (and 7 more) in bind false-positive
#11 opened Dec 8, 2023 by raboof
False positive: CVE-2021-26720 in avahi false-positive
#12 opened Dec 8, 2023 by raboof
1
False positive: wrong match on jenkins git plugin false-positive
#15 opened Dec 6, 2023 by cidkidnix
1
False positives: various in 'kernel-modules' and 'glibc-locales' bug Something isn't working false-positive
#17 opened Nov 26, 2023 by raboof
1
Show severity enhancement New feature or request
#20 opened Nov 24, 2023 by raboof
2
False positive: w3m via nixos-help false-positive
#22 opened Nov 23, 2023 by raboof
Explain where a dependency comes from enhancement New feature or request
#25 opened Nov 23, 2023 by raboof
Export scan results in a form Sonatype CLM / Nexus IQ can consume
#23 opened Nov 21, 2023 by raboof
Package up the local scanner as a flake
#24 opened Nov 20, 2023 by raboof
[Tracking issue] Demo Readiness
#18 opened Nov 15, 2023 by ApolloUnicorn
1
Sending notifications of newly detected local vulnerabilities enhancement New feature or request
#26 opened Nov 14, 2023 by raboof
1
Creating the inventory of locally installed derivations
#19 opened Nov 14, 2023 by raboof
1
ProTip! Mix and match filters to narrow down what you’re looking for.