Attributed metadata history
Up to 100 retained publisher events per page for 31e15fbc22fbb91ec681c2985392569df076eb80bc9495d31c312c85e0b3afff. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_c675c564d013a8a4c9
observed · 2026-10-12 15:09:04 UTC
Features: Feature #2815 Add support for the CycloneDX 1.7 specification (bumps cyclonedx-go to v0.11.0). Feature #2799 Enable .csproj and Central Package Management (nugetcpm) source scanning plugins by default. Feature #2871 Extract and parse Alpine OS distro version (e.g. Alpine:v3.17, Alpine:edge) from PURL distro qualifiers to scan packages under their respective Alpine ecosystems. Feature #2801 Enable the swift/packageresolved plugin by default to support SwiftURL vulnerability scans. Feature #2666 Add a Docker-based variant of the pre-commit hook in .pre-commit-hooks.yaml to avoid local compilation. Feature #2637 Add a new configuration setting ScanGoModVersion (disabled by default) to avoid parsing toolchain version directives directly from go.mod, preventing misleading warnings. Feature #2772 Scan container images built with Canonical Chisel by enabling the os/chisel extractor plugin. Fixes: Bug #2807 Sanitize package name, source, and version fields in the vertical output format to prevent GitHub Actions workflow command injection vulnerabilities from crafted lock files. Bug #2876 Improve HTML scan report usability by supporting standard click modifiers (Ctrl/Cmd/middle
Fingerprint: a1f7ab8a3506fb3a07779e7af3d9686cfbb4f9bdffb8f5b931223202d062f4b8
intelligence_src_c675c564d013a8a4c9
observed · 2026-10-12 15:09:04 UTC
available
Fingerprint: ebe56682a460fbbd8fc896db7195b35f1ac95a62a2029ef19bb828e7976e6b0e