OSV scalibr interface #1142

another-rex · 2024-07-26T00:46:59Z

This PR begins the work of migrating lockfile extractors to use the new interface.

To aid in the review, I copied all of pkg/lockfile into internal/lockfilescalibr, and pushed that to osv-scanner-v2, which this is now merging in.

Some notes on the migration:

This is still in a really draft state
None of the fixtures has been touched with the exception of alpine, which had some minor directory moving to support testing OS version extraction.
Still missing a few extractors:
- dpkg (scalibr already has dpkg)
- osv-scanner config format
- csv (intentionally left out as I'm not sure if we need it)
- node_modules (scalibr already has a better version, that uses package.jsons)
- Maven + transition dependency resolution (might have to wait till we get a unified client)
Moved to tabular tests,
- Updated tests to test Inventory output
- Tests now all use similar helper functions to make future refactoring a lot easier, and to make writing tests easier
Kept PackageDetails for some packages and added a simple conversion function
to inventory before returning (currently the only one still using PackageDetails is npm extractor, as adding the merging code is a bit convoluted odd with inventory)
Copied the new interface into lockfilescalibr/extractor.go. This is temporary until the move into osv-scalibr, which will contain both
All ToPURL functions need to be looked at to see if we should be adding additional qualifiers/namespaces..etc.
We need to add tests for ToPurl() and Ecosystem() functions
Because scalibr uses a virtual FS to walk over files, all paths are absolute from ScanRoot, but will not start with /

Update:

Moved all of the osv-scalibr native types to packages with the same name as in osv-scalibr, to make migrating easier.
Moved test helper functions into their own package to allow it to be shared with separate package extractors. (sharedtesthelpers)
Moved most extractors into their own package, the remaining ones are still in progress to be moved. This follows a similar folder structure as osv-scalibr.
Not sure where to put metadata, so separated it out into the othermetadata package

Replicate google#1109 more like google#1030 to avoid Renovate failures like google#1120 (comment) The Docker files are already at 1.22.5, not sure if we want to update to this globally?

https://docs.github.com/en/issues/using-labels-and-milestones-to-track-work/managing-labels#applying-a-label > Anyone with triage access to a repository can apply and dismiss labels.

Copying the `EcosystemSpecific` data from the `Manifest` to the `ManifestPatch` is a bit cumbersome for the override strategy, and `ManifestPatch` already has a field for the original manifest. I don't think the current Maven `EcosystemSpecific` data is ever going to differ from the what's in the original manifest?

Currently, Maven dependency management is not added to the override client so they are not considered when computing Maven dependency graph. This PR adds all direct dependency management to override client so that transitive dependencies are resolved correctly.

…er group (google#1132) Bumps the bundler group in /docs with 1 update: [rexml](https://github.com/ruby/rexml). Updates `rexml` from 3.3.1 to 3.3.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/rexml/releases">rexml's releases</a>.</em></p> <blockquote> <h2>REXML 3.3.2 - 2024-07-16</h2> <h3>Improvements</h3> <ul> <li> <p>Improved parse performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/160">GH-160</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Improved parse performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/169">GH-169</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/170">GH-170</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/171">GH-171</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/172">GH-172</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/173">GH-173</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/174">GH-174</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/175">GH-175</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/176">GH-176</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/177">GH-177</a></li> <li>Patch by Watson.</li> </ul> </li> <li> <p>Added support for raising a parse exception when an XML has extra content after the root element.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/161">GH-161</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Added support for raising a parse exception when an XML declaration exists in wrong position.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/162">GH-162</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Removed needless a space after XML declaration in pretty print mode.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/164">GH-164</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Stopped to emit <code>:text</code> event after the root element.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/167">GH-167</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> </ul> <h3>Fixes</h3> <ul> <li>Fixed a bug that SAX2 parser doesn't expand predefined entities for <code>characters</code> callback. <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/168">GH-168</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> </ul> <h3>Thanks</h3> <ul> <li> <p>NAITOH Jun</p> </li> <li> <p>Watson</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ruby/rexml/blob/master/NEWS.md">rexml's changelog</a>.</em></p> <blockquote> <h2>3.3.2 - 2024-07-16 {#version-3-3-2}</h2> <h3>Improvements</h3> <ul> <li> <p>Improved parse performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/160">GH-160</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Improved parse performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/169">GH-169</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/170">GH-170</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/171">GH-171</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/172">GH-172</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/173">GH-173</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/174">GH-174</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/175">GH-175</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/176">GH-176</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/177">GH-177</a></li> <li>Patch by Watson.</li> </ul> </li> <li> <p>Added support for raising a parse exception when an XML has extra content after the root element.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/161">GH-161</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Added support for raising a parse exception when an XML declaration exists in wrong position.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/162">GH-162</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Removed needless a space after XML declaration in pretty print mode.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/164">GH-164</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> <li> <p>Stopped to emit <code>:text</code> event after the root element.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/167">GH-167</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> </ul> <h3>Fixes</h3> <ul> <li>Fixed a bug that SAX2 parser doesn't expand predefined entities for <code>characters</code> callback. <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/168">GH-168</a></li> <li>Patch by NAITOH Jun.</li> </ul> </li> </ul> <h3>Thanks</h3> <ul> <li> <p>NAITOH Jun</p> </li> <li> <p>Watson</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/rexml/commit/2b285ac0804f2918de642f7ed4646dc6d645a7fc"><code>2b285ac</code></a> Add 3.3.2 entry</li> <li><a href="https://github.com/ruby/rexml/commit/0e33d3adfb5069b20622e5ed9393d10b8cc17b40"><code>0e33d3a</code></a> test: improve linear performance test names</li> <li><a href="https://github.com/ruby/rexml/commit/910e5a2b487cb5a30989884a39f9cad2cc499cfc"><code>910e5a2</code></a> Fix performance issue caused by using repeated <code>></code> characters inside `<xml><!...</li> <li><a href="https://github.com/ruby/rexml/commit/1f1e6e9b40bf339894e843dfd679c2fb1a5ddbf2"><code>1f1e6e9</code></a> Fix ReDoS by using repeated space characters inside `<!DOCTYPE name [<!ATTLIS...</li> <li><a href="https://github.com/ruby/rexml/commit/1cc1d9a74ede52f3d9ce774cafb11c57b3905165"><code>1cc1d9a</code></a> Suppress have_root not initialized warnings on Ruby < 3</li> <li><a href="https://github.com/ruby/rexml/commit/67efb5951ed09dbb575c375b130a1e469f437d1f"><code>67efb59</code></a> Fix performance issue caused by using repeated <code>></code> characters inside `<!DOCTY...</li> <li><a href="https://github.com/ruby/rexml/commit/a79ac8b4b42a9efabe33a0be31bd82d33fd50347"><code>a79ac8b</code></a> Fix performance issue caused by using repeated <code>></code> characters inside `<!DOCTY...</li> <li><a href="https://github.com/ruby/rexml/commit/c33ea498102be65082940e8b7d6d31cb2c6e6ee2"><code>c33ea49</code></a> Fix performance issue caused by using repeated <code>></code> characters after ` <!DOCTY...</li> <li><a href="https://github.com/ruby/rexml/commit/9f1415a2616c77cad44a176eee90e8457b4774b6"><code>9f1415a</code></a> Fix performance issue caused by using repeated <code>></code> characters inside `CDATA [...</li> <li><a href="https://github.com/ruby/rexml/commit/c1b64c174ec2e8ca2174c51332670e3be30c865f"><code>c1b64c1</code></a> Fix performance issue caused by using repeated <code>></code> characters inside comments...</li> <li>Additional commits viewable in <a href="https://github.com/ruby/rexml/compare/v3.3.1...v3.3.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rexml&package-manager=bundler&previous-version=3.3.1&new-version=3.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/google/osv-scanner/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Xueqin Cui <[email protected]>

Currently self-closing tags are marshaled as `<a></a>` which is not the preferred format `<a/>`. With the current implementation of `encoding/xml`, self-closing tags are expanded to `StartElement` and `EndElement` so both elements are written to output. In this PR, a field `Empty` is added to both elements to indicate whether the current element is empty. During encoding: - `/` is written before `>` for an empty `StartElement` - nothing will be written for an empty `EndElement` Considering that we only want tabs not being escaped, this PR modifies `escapeNewline` to `escapeWhitespace` to indicate if we want all whitespace characters escaped.

…#1236) The latest release of osv.dev enforces the Alpine release version suffix in queries. Make the apk-installed parser use the latest Alpine version (`v3.20`) when it can't find the version file to stop it from erroring.

Prepare for v1.8.5 release

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner).  Co-authored-by: Xueqin Cui <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v5.1.1` -> `v5.2.0` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | minor | `v4.3.6` -> `v4.4.0` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.26.4` -> `v3.26.6` | | [ruby/setup-ruby](https://redirect.github.com/ruby/setup-ruby) | action | minor | `v1.190.0` -> `v1.191.0` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v5.2.0`](https://redirect.github.com/actions/setup-python/compare/v5.1.1...v5.2.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.1.1...v5.2.0) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v4.4.0`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0) </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.26.6`](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) ### [`v3.26.5`](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) </details> <details> <summary>ruby/setup-ruby (ruby/setup-ruby)</summary> ### [`v1.191.0`](https://redirect.github.com/ruby/setup-ruby/releases/tag/v1.191.0) [Compare Source](https://redirect.github.com/ruby/setup-ruby/compare/v1.190.0...v1.191.0) #### What's Changed - Add ruby-3.3.5 by [@ruby-builder-bot](https://redirect.github.com/ruby-builder-bot) in [https://github.com/ruby/setup-ruby/pull/634](https://redirect.github.com/ruby/setup-ruby/pull/634) **Full Changelog**: ruby/setup-ruby@v1.190.0...v1.191.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner).  Co-authored-by: Xueqin Cui <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | golang | stage | patch | `1.23.0-alpine3.19` -> `1.23.1-alpine3.19` | --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner).  Co-authored-by: Xueqin Cui <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | digest | `0a4eaa0` -> `beefdbd` | --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner).  Co-authored-by: Xueqin Cui <[email protected]>

…vulns (google#1235) Adds functionality to allow guided remediation to fix vulns in `dependencyManagement` dependencies that do not appear in the resolved dependency graph of the POM - useful for 'remediating' POMs without any actual dependencies. I've accomplished this by checking if each of the original management dependencies (*excluding* those inherited from parents) appear in the graph after the initial resolution. If they're missing, I add them to the graph as direct dependencies (not resolving their transitive dependencies). This behaviour is disabled by default, and I've added a `--maven-fix-management` flag to enable it. I was going to try combine this and `--ignore-dev` into a `--groups` flag but it seemed like it would be a bit too complicated.

…oogle#1243) This allows you to configure the scanner to completely ignore the license of a package in a way that is explicit, as oppose to configuring `license.overrides` to set the package license to an allowed one. Resolves google#1124

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-java](https://redirect.github.com/actions/setup-java) | action | minor | `v4.2.2` -> `v4.3.0` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.26.6` -> `v3.26.7` | --- ### Release Notes <details> <summary>actions/setup-java (actions/setup-java)</summary> ### [`v4.3.0`](https://redirect.github.com/actions/setup-java/compare/v4.2.2...v4.3.0) [Compare Source](https://redirect.github.com/actions/setup-java/compare/v4.2.2...v4.3.0) </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.26.7`](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner).

…code (google#1242) When looking into some other config stuff I realised the current loading logic just assumes that an error is because a config doesn't exist and silently falls back to the default one, when really it could be that there is a config but it's invalid

See preview here: https://another-rex.github.io/osv-scanner/

This reverts commit 4040f08.

This reverts commit 9da956c.

andrewpollock and others added 30 commits July 23, 2024 09:18

Reflect Go 1.21.12 change more broadly (google#1133)

d9eccf2

Replicate google#1109 more like google#1030 to avoid Renovate failures like google#1120 (comment) The Docker files are already at 1.22.5, not sure if we want to update to this globally?

Exempt backlog label from stale treatment (google#1135)

0a95214

https://docs.github.com/en/issues/using-labels-and-milestones-to-track-work/managing-labels#applying-a-label > Anyone with triage access to a repository can apply and dismiss labels.

Cargo migrated

58d2d26

Fix bugs

ccf4882

Remove old comments

a16e2dd

go mod migrated

cca3bb5

Fix formatting and output

07bf856

Fix go tests

2d46633

Unify tests into helper function

fdc4fb7

Add npm v1

9a81986

Fix npm tests

1920a55

Add notes, move to old version of parse-npmp

5f15b87

Fix tests agin

ca0c473

Add npm v2 tests

72cfb71

Better formatting

abd101f

Fix script new lines

7500d91

Composer support

a0bd287

Fix composer tests

2fb4b38

Add nuget, fix test naming

e016187

Fix nuget test, fix helper tests

5c3ad3c

Delete all parsers, revert later

4349bdc

Add Pnpm

38ee443

Fix PURLs

207fb44

Add Renv

ba08f5d

Add requirements.txt

0191e11

Add yarn lock

7fbcfdf

cuixq and others added 28 commits September 10, 2024 10:21

chore(release): changelog for v1.8.5 (google#1237)

6f61445

Prepare for v1.8.5 release

feat: Copy over dark docs theming from osv.dev (google#1245)

84f1a96

See preview here: https://another-rex.github.io/osv-scanner/

Step 1

ac07a7d

step 2

c20187d

Step 3

5e5ebaf

Step 4

eae71b8

Step 5

e70b53a

Merge branch 'main' into osv-scalibr-interface

1412374

Run documentation script over some extractors

2a433bd

Add comments and private public structs for Java.

dfed11c

Remove python as it has already been migrated (temporary)

9da956c

Composer and Cargo documentation

7d73673

Remove alpine temporarily

4040f08

Add documentation to all entries

b586be8

Revert "Remove alpine temporarily"

eacb5f5

This reverts commit 4040f08.

Revert "Remove python as it has already been migrated (temporary)"

8b0043f

This reverts commit 9da956c.

another-rex deleted the branch google:osv-scanner-v2 October 22, 2024 23:25

another-rex closed this Oct 22, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OSV scalibr interface #1142

OSV scalibr interface #1142

another-rex commented Jul 26, 2024 •

edited

Loading

OSV scalibr interface #1142

OSV scalibr interface #1142

Conversation

another-rex commented Jul 26, 2024 • edited Loading

another-rex commented Jul 26, 2024 •

edited

Loading