devops-kung-fu / bomber

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

https://devops-kung-fu.github.io/bomber/

devops-kung-fu/bomber Issues

JSON output produces invalid json document
Updated a month ago
compitibility with cyclonedx-maven-plugin:2.8.1
Closed a month ago4
Summary Renderer
Closed a month ago2
Bomber reporting OSV vulnerabilities on package versions that aren't in SBOM
Closed a month ago5
error retrieving vulnerability data (400 Bad Request)
Closed a month ago4
Shows no package shown after passing Json File.
Closed a month ago6
Make Snyk API URL configurable
Updated 2 months ago
Get missing or enhance licenses from ClearlyDefined
Updated 3 months ago
Please consider adopting OpenSSF Scorecard
Updated 3 months ago1
Feature Request
Updated 3 months ago1
SARIF output
Closed 2 years ago1
--ignore-file option not working
Updated 6 months ago3
HTML report generation fails silently when processing entire folder containing an "empty" SBOM
Updated 6 months ago2
Doesn't work with CycloneDX version 1.5
Closed 7 months ago2
Create Website
Closed 7 months ago
bomber doesn't detect packages
Closed 7 months ago2
Bomber is not finding packages in a SBOM file that has been converted using the CycloneDX Convert function
Updated 10 months ago3
Exit code handling
Closed 10 months ago13
```bomber``` should fail gracefully with a readable error message if an SBOM cannot be marshalled
Closed 10 months ago3
No results when scanning a hierachical CycloneDX file from cyclonedx-cli
Closed 10 months ago10
EPSS enricher will only return the first 100 results
Updated 10 months ago2
False version display 0.4.5 bomber
Closed a year ago4
Regression: exit code is not zero when no vulnerabilities or issues found
Closed a year ago3
Create exit code documentation
Closed a year ago
Bomber deb clashes with existing package
Closed a year ago2
VS Code extension
Updated a year ago1
error retrieving vulnerability data (400 Bad Request)
Closed a year ago7
Standardize output of bomber as VDR output
Updated a year ago3
Duplicate output lines
Closed a year ago4
libc requirements in DEB
Closed a year ago5
No results when scanning CycloneDX file from cargo-cyclonedx
Closed a year ago3
Same test SBOM 500's OSSINDEX but not OSV
Closed a year ago1
error retrieving vulnerability data (400 Bad Request)
Closed a year ago3
please add html support description on output of bomber -h
Closed a year ago
goreleaser not releasing
Closed 2 years ago1
the 0.4.1 version in release will show 0.4.0 and show "open : no such file or directory" error
Closed 2 years ago1
bomber published SBOM is incorrectly labeled and has suspicious product name
Closed 2 years ago1
Components without Purls should not be processed
Closed 2 years ago
EPSS score output should include the probability as well as the existing percentage
Closed 2 years ago1
Fetch data from VulnerableCode
Updated 2 years ago2
(Feature Request) Github Action
Closed 2 years ago6
Add --ignore-flag to ignore specific vulnerabilities
Closed 2 years ago3
Add ZERO.health logo in a sponsor section on README.md
Closed 2 years ago
Always getting no packages detected from spdx files from yocto
Closed 2 years ago3
qt.qpa.xcb: could not connect to display
Closed 2 years ago5
Need a generous Graphic Designer to donate a new logo
Closed 2 years ago1
POM/Maven scanning capability
Closed 2 years ago2
bomber fails when `licenses` are specified as `expression`
Closed 2 years ago6
bomber should validate that mandatory fields exist on BOM load
Updated 2 years ago
EPSS not working with non-CVE IDs
Closed 2 years ago2