Google Git Google Git
Sign in
apache/security-vulnogram/HEAD
  1. f9e6f66 fix(cve5): require at least one problem type (#284) by Anurag-S1ngh · 15 hours ago main
  2. 6d0b16b docs(contributing): notes on upstream relationship (#278) by Arnout Engelen · 5 days ago
  3. 15e8d41 build: install dependencies in a oneshot unit without install scripts (#272) by Piotr P. Karwasz · 4 weeks ago
  4. 5b96a28 fix: keep bearer-token authentication to the request (#269) by Jarek Potiuk · 4 weeks ago
  5. 44e8c1b feat(cve5): show the repository when set and require a GitBox URL (#271) by Piotr P. Karwasz · 4 weeks ago
  6. 6a86e45 fix: name each product once in the published title (#270) by Piotr P. Karwasz · 4 weeks ago
  7. 0eaee4c Drop advisory URL from subject (#267) by Sebb · 4 weeks ago
  8. cfb2b48 fix: treat an unset NODE_ENV as development (#268) by Jarek Potiuk · 4 weeks ago
  9. 9ffa163 Merge pull request #264 from potiuk/token-authorize by Arnout Engelen · 4 weeks ago
  10. 86e258a feat(allocate): return the allocated CVE ID as JSON to token callers by Jarek Potiuk · 4 weeks ago
  11. 73ec7ed feat(token): allow requesting allocate tokens through the browser by Jarek Potiuk · 4 weeks ago
  12. e32434f Merge branch 'main' into token-authorize by Arnout Engelen · 5 weeks ago
  13. 8b0f147 fix: apply PMC record ownership consistently across record routes (#265) by Jarek Potiuk · 5 weeks ago
  14. 61df422 docs(token): add a design doc for browser-approved tokens by Jarek Potiuk · 5 weeks ago
  15. c293f25 feat(token): let tools request a PMC-scoped token through the browser by Jarek Potiuk · 5 weeks ago
  16. 52fc959 feat: show CVSS ratings in notification emails (#225) by Shreemaan Abhishek · 6 weeks ago
  17. f29199c fix(cve5): do not require the Package URL (#258) by Piotr P. Karwasz · 7 weeks ago
  18. a9dc776 feat(cve5): derive legacy package identifiers from the Package URL (#253) by Piotr P. Karwasz · 7 weeks ago
  19. ae349ac fix: default metrics for new advisories (#256) by Arnout Engelen · 7 weeks ago
  20. 3212b85 auth: make more oauth parameters configurable (#251) by Arnout Engelen · 7 weeks ago
  21. ec4b71d Merge pull request #252 from raboof/api-allocate by Arnout Engelen · 8 weeks ago
  22. 22f36c7 feat(allocate): allow allocating CVEs using a Bearer token by Arnout Engelen · 8 weeks ago
  23. 4ea4835 require at least one severity rating (#250) by Arnout Engelen · 8 weeks ago
  24. dacfb61 deployment: don't restart update-deps jobs by Arnout Engelen · 8 weeks ago
  25. 4290164 fix(cvepublish): show error when CVE publication fails (#247) by Arnout Engelen · 9 weeks ago
  26. 91a5860 feat: don't redirect after publishing (#238) by Arnout Engelen · 9 weeks ago
  27. 1b5a7fb Merge pull request #244 from apache/fix/asf-metric-missing-type by Arnout Engelen · 9 weeks ago
  28. 7c50619 fix: minimize change by Piotr P. Karwasz · 9 weeks ago fix/asf-metric-missing-type
  29. 04df207 fix: ASF severity metric added to existing record lacks 'other.type' by Piotr P. Karwasz · 9 weeks ago
  30. b606271 feat: accept pmc, title and message/list id (#241) by Arnout Engelen · 9 weeks ago
  31. 99eab23 feat: hide sidebar (#239) by Arnout Engelen · 9 weeks ago
  32. bab161a chore: hide 'Scoring scenarios' from metrics (#237) by Arnout Engelen · 9 weeks ago
  33. 4cf0318 fix: comment footer link (#235) by Arnout Engelen · 9 weeks ago
  34. f097fa2 fix(api): allow POST via API (#228) by Arnout Engelen · 9 weeks ago
  35. de8449b Bump actions/setup-node from 6 to 7 (#230) by dependabot[bot] · 9 weeks ago
  36. b1f8793 Merge pull request #231 from apache/dependabot/github_actions/actions/checkout-7 by Arnout Engelen · 10 weeks ago
  37. 507f539 Bump actions/checkout from 6 to 7 by dependabot[bot] · 10 weeks ago
  38. eb3de5e Merge pull request #236 from raboof/fix-codeql by Arnout Engelen · 10 weeks ago
  39. b73f1b4 chore(ci): fix codeql by Arnout Engelen · 10 weeks ago
  40. e2615db Merge pull request #227 from raboof/fix-sending-notification-emails by Arnout Engelen · 10 weeks ago
  41. eeaf8fa Merge pull request #229 from raboof/remove-cveportal-from-sidebar by Arnout Engelen · 10 weeks ago
  42. d13b7cc Merge pull request #205 from apache/pmcs-with-security-emails by Arnout Engelen · 10 weeks ago
  43. 9c9b6c3 add more missing security lists by Arnout Engelen · 10 weeks ago pmcs-with-security-emails
  44. 280cb9a fix: sending notification emails by Arnout Engelen · 10 weeks ago
  45. 790d6c9 Merge pull request #220 from raboof/fix by Arnout Engelen · 2 months ago
  46. 687a750 fix: follow-up on publicjson fixes by Arnout Engelen · 2 months ago
  47. 8c89f36 Merge pull request #219 from raboof/use-promise-mongo-api by Arnout Engelen · 2 months ago
  48. 7a72dde fix(api): fetch public CVEs by Arnout Engelen · 2 months ago
  49. df41369 Merge pull request #218 from apache/main-next by Arnout Engelen · 2 months ago
  50. fad0f35 fix: use correct header name for bearer tokens (#212) by Arnout Engelen · 3 months ago
  51. 23b08e0 feat: poor man's token auth (#211) by Arnout Engelen · 3 months ago
  52. ea23c5c mount postfix drop dir by Arnout Engelen · 4 months ago
  53. 5d8f62c test instance of vulnogram by Arnout Engelen · 4 months ago
  54. 263e44d Bump github/codeql-action from 3 to 4 (#206) by dependabot[bot] · 4 months ago main-backup2
  55. 189396b Bump actions/checkout from 6 to 7 (#208) by dependabot[bot] · 4 months ago
  56. d68fb40 deployment: support deploying new version as pipservice (#207) by Arnout Engelen · 5 months ago
  57. 633a77d Merge remote-tracking branch 'origin/main-next' into main-next by Arnout Engelen · 5 months ago
  58. 11aab0d Merge remote-tracking branch 'origin/main' into main-next by Arnout Engelen · 5 months ago
  59. a0bb720 conf: superset has a security list by Arnout Engelen · 5 months ago
  60. 61b2437 Merge pull request #198 from apache/infrastructure-ruleset-bot/default-branch-protection by Arnout Engelen · 5 months ago
  61. 2d33f36 improve logout flow by Arnout Engelen · 5 months ago
  62. 12e7ca5 orc and spark have retired their security lists by Arnout Engelen · 5 months ago
  63. e3c83a1 Set up default protection ruleset for default and release branches by The Apache Software Foundation · 6 months ago infrastructure-ruleset-bot/default-branch-protection
  64. 77cee12 Merge pull request #183 from raboof/unittests by Arnout Engelen · 6 months ago
  65. cbe31d4 Merge pull request #196 from raboof/update-oauth by Arnout Engelen · 6 months ago
  66. a5f37b4 Expand OAuth implementation by Arnout Engelen · 6 months ago
  67. a710c6c remove CVE portal from sidebar by Arnout Engelen · 6 months ago
  68. 2660f1e fix and run unit tests by Arnout Engelen · 6 months ago
  69. cad7996 Merge pull request #176 from raboof/integrate-upstream-changes by Arnout Engelen · 6 months ago main-backup
  70. 8ce80a3 Merge branch 'main' into integrate-upstream-changes by Piotr P. Karwasz · 6 months ago
  71. 567651b feat: improve testability of Vulnogram (#194) by Piotr P. Karwasz · 6 months ago
  72. 4f1aca4 serverity level validation by Arnout Engelen · 6 months ago
  73. fcb5b3e enable packageURL field by Arnout Engelen · 6 months ago
  74. 5f7ecce Merge remote-tracking branch 'upstream/1.0.3' into integrate-upstream-changes by Arnout Engelen · 6 months ago
  75. cd81898 Merge remote-tracking branch 'origin/main' into integrate-upstream-changes by Arnout Engelen · 6 months ago
  76. 3a0ce91 Merge remote-tracking branch 'upstream/1.0.2' into integrate-upstream-changes by Arnout Engelen · 6 months ago
  77. 184ccb9 Bump actions/checkout from 2 to 6 (#192) by dependabot[bot] · 6 months ago
  78. 767dcdc Fix and simplify CodeQL action (#190) by Piotr P. Karwasz · 6 months ago
  79. f0daa30 Fix `dependabot.yml` syntax by Piotr P. Karwasz · 6 months ago
  80. f9b3852 simplify message by Chandan · 6 months ago
  81. 38d73e2 Bump CodeQL to version 3 by Piotr P. Karwasz · 6 months ago
  82. 4743f6a Try enabling Dependabot again by Piotr P. Karwasz · 6 months ago
  83. 1df7c1e Disable Dependabot for NPM by Piotr P. Karwasz · 6 months ago
  84. a25df36 Enable Dependabot (#188) by Piotr P. Karwasz · 6 months ago
  85. 5a603a4 Configure Dependabot for `github-actions` (#186) by Piotr P. Karwasz · 6 months ago
  86. 8d48b5a Ignore IntelliJ IDEA/WebStorm files by Piotr P. Karwasz · 6 months ago
  87. 8396f85 chore: restrict codeql CI permissions (#185) by Arnout Engelen · 6 months ago
  88. c3759c8 CVE Transfer Feature by Chandan · 6 months ago
  89. 2bbedb5 Merge pull request #181 from raboof/asf-dev-mode by Arnout Engelen · 6 months ago
  90. 3700467 ASF: disable CVE and email in 'development' mode by Arnout Engelen · 6 months ago
  91. 9954795 AV icons by Chandan · 6 months ago
  92. 165d2b3 missing spaces in html to text and the start of <p> by Chandan · 6 months ago
  93. 1446fa6 Merge pull request #180 from raboof/allow-security-to-open-malformed-cves by Jarek Potiuk · 7 months ago
  94. ba78ab3 Allow security team members to edit malformed CVEs by Arnout Engelen · 7 months ago
  95. 2f11bca set current time on focus - seems like the best option to address Firefox's lack of time picker on datetime-local by Chandan · 7 months ago
  96. 22c231f render improvements by Chandan · 7 months ago
  97. f3ca093 Bug fixes, improve error bubble display, date rendering by Chandan · 7 months ago
  98. e66194e fix friendly date rendering by Chandan · 7 months ago
  99. cc2ac3b Bug fixes by Chandan · 7 months ago
  100. 1a7cd00 bug fixes, don't invert colors for some icons like logos by Chandan · 7 months ago