ossf / package-analysis

Open Source Package Analysis

ossf/package-analysis Issues

Monitoring Data (with clear labels and malicious indicators) for Academic Research
Closed 7 days ago
enhancement: github-actions analysis
Updated 11 days ago
Error from scanning the package
Updated a month ago3
Report a critical issue
Closed 2 months ago1
Proposed legal & governance improvements for the OpenSSF
Updated 3 months ago1
support extracting zip archives
Updated 3 months ago2
Dynamic analysis data in BigQuery is not being updated.
Closed 4 months ago2
crates.io access is failing
Closed 4 months ago1
Create test packages that simulate malicious behaviors we want to catch
Updated 5 months ago
Windows support
Closed 5 months ago1
Whether the pushed results are all malicious?
Closed 5 months ago4
ES modules fail to be imported during node.js dynamic analysis
Updated 6 months ago
Please
Closed 6 months ago1
restructure dynamic analysis schema
Updated 7 months ago
collect hash for downloaded archive
Updated 7 months ago
Create BigQuery schema and ingest static analysis results
Closed 8 months ago
Define a global entropy measurement for strings and literals
Updated 8 months ago1
Log strace raw data to a separate file instead of stdout
Closed 8 months ago
Create new dynamic analysis phase for code execution
Closed 8 months ago
The description about what types of data has been collected?
Closed 9 months ago1
Update go to version 1.21
Closed 10 months ago
Remove entropy summaries and add individual entries to each literal
Closed 10 months ago1
Change static analysis JSON schema to support BigQuery import
Closed 10 months ago2
Add unit tests for GCP and PubSub buckets in ResultStore
Updated 10 months ago
Analysed package is not saved with correct name
Closed 10 months ago
Add URL and IP address detection to static analysis
Closed 10 months ago
Improve package download flow
Updated a year ago
PubSub messages being redelivered while a worker is actively processing the message.
Closed a year ago
PHP composer installation fails and breaks dynamic analysis dockerfile build
Closed a year ago1
Support Python packages that aren't on PyPI
Updated a year ago2
Figure out how to interrupt long-running package functions during automated execution
Updated a year ago
Production workers are running out of container space for sandboxes
Closed a year ago2
Log stdout and stderr from dynamic analysis process
Updated a year ago
Improve logging of podman errors
Closed a year ago1
crates.io error with `itoa` package
Closed a year ago
Allow passing in sandbox configuration
Closed a year ago
Replace google/gopacket with gopacket/gopacket
Closed a year ago
Move logic for saving data to buckets to shared function(s) in `worker` package
Closed a year ago
Remove legacy per-ecosystem sandbox images
Closed a year ago
Copy local archives into sandbox rather than mounting
Closed a year ago1
Enable combined dynamic analysis sandbox in worker
Closed a year ago
DNS requests appear to be missing or incomplete.
Updated a year ago3
Is the *.tgz in line 80 of the analyze-tarballs.sh file wrong?
Closed a year ago1
Sandbox failed (error starting container: exit status 125)
Closed a year ago9
Allow running code as part of dynamic analysis
Updated a year ago4
Add "tar.gz" for local PyPi package scanning supports
Closed a year ago6
Sandbox failed (error starting container: exit status 125)
Closed a year ago5
Unable to find image 'gcr.io/ossf-malware-analysis/analysis:latest' locally
Closed a year ago
Make approach to defining enums consistent across the project
Updated a year ago6
Refactor pkg/
Closed a year ago9