• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

smithy-security / smithy
5%
main: 6%

Build:
Build:
LAST BUILD BRANCH: ptzianos/refactor-osv-scanner
DEFAULT BRANCH: main
Repo Added 21 Oct 2024 11:09AM UTC
Token dpdu6Vcj72k9ORfEzM24cfF6H5HN631Y0 regen
Build 1029 Last
Files 43
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH SAAS-7700-update-sarif-package
branch: SAAS-7700-update-sarif-package
CHANGE BRANCH
x
Reset
Sync Branches
  • SAAS-7700-update-sarif-package
  • 332-fix-pdf-consumer
  • 712-reachability-enricher-works-with-all-languages
  • SAAS-7606-osv-do-not-differentiate-between-empty-and-malformed-file
  • SAAS-7700-fix-abs-path-issue
  • SMITHY-540-codeql-node
  • SMITHY-639-update-checkov
  • SMITHY-642-improve-kics
  • SMITHY_539_fix-vendor-detection-in-reachability-enricher
  • add-component-release-channels
  • add-logging-to-image-metadata-get
  • add-metadata-publishing-to-image-get
  • add-metadata-to-scanners
  • add_soocon25_slides
  • allow-reporters-to-run-without-findings
  • andream16/OCU-223-local-example
  • andream16/OCU-254/register-and-run-components-v1
  • andream16/OCU-254/register-and-run-components-v2
  • andream16/OCU-472/basic-smithyctl-boilerplate
  • andream16/OCU-472/basic-smithyctl-boilerplate-and-cleanup
  • andream16/add-annotations
  • andream16/adding-attr-to-exploitability-enrichment
  • andream16/adding-ocsf-ext
  • andream16/automigrate-on-sqlite
  • andream16/bump-components-targets
  • andream16/bump-sarif-v0.0.4
  • andream16/bump-sdk
  • andream16/bump-sdk-0.0.7-alpha
  • andream16/bump-sdk-v0.0.3-alpha
  • andream16/bumping-deps
  • andream16/discord-improvements
  • andream16/dogfooding-duo
  • andream16/feature/OCU-471-build-execute
  • andream16/feature/dra-148-release-sarif-to-ocsf-package-and-update-dependant
  • andream16/feature/ocu-267-explore-go-enum-on-sdk
  • andream16/feature/ocu-268-replace-errors-and-fmterrorf-utilisations-for-go-errors-in
  • andream16/feature/ocu-421-jira-on-new-sdk-pt-1
  • andream16/feature/ocu-473-package--and-push-components-using-oras
  • andream16/feature/ocu-481-version-command
  • andream16/feature/saas-5016-as-a-smithy-engineer-i-want-to-extend-the-source-code
  • andream16/feature/saas-610-implement-findings-storage-gateway-reader-and-writer/pt-1
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-1
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-2
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-3
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-4
  • andream16/feature/smithy-556-linear-on-new-sdk
  • andream16/feature/smithy-573-output-gitdiff-file-with-diff-of-branch-or-pr-against-the
  • andream16/feature/user-98-rename-the-s3-target-to-source-code-artefact-and-extend-it
  • andream16/fix-bug-not-handling-prs-refs
  • andream16/fix-checkov-kics
  • andream16/fix-linear-base-url
  • andream16/fix-osv-scanner
  • andream16/fix-smithyctl-target
  • andream16/fix-typo-tf
  • andream16/fix-wrong-custom-annotation-enrichment
  • andream16/fixing-malformed-component-config
  • andream16/git-clone-component
  • andream16/go-sec-pipeline-components
  • andream16/hack-me
  • andream16/improve-local-golang-pipeline-example
  • andream16/jira-reporter-template
  • andream16/label
  • andream16/link-to-runs
  • andream16/lower-go-version-to-1.23
  • andream16/misc-fixes
  • andream16/pr-diff-enrichment
  • andream16/prefix-targets
  • andream16/prefix-targets-v2
  • andream16/refreshing-docs
  • andream16/removing-zap-with-orchestration-script
  • andream16/repackage-components
  • andream16/sdk-docs
  • andream16/simplify-git-clone-diff-reporting
  • andream16/stop-deleting-sqlite-db
  • andream16/test-gh
  • andream16/test-vuln
  • andream16/track-reachability-type
  • andream16/track-sdk-version
  • andream16/tweak-components-no-findings
  • andream16/unit-tests-jira-reporter
  • andream16/update-discord-link
  • andream16/update-docs
  • andream16/update-references-to-smithy
  • andream16/use-plain-http-setting-correctly
  • battlecard-reporter
  • better-issue-info
  • bugfix/453/investigate/dependency-check
  • bugfix/456/defectdojo-crashes-if-engagement-time-zero
  • bugfix/460/tfsec-parser
  • bugfix/component-description-fix
  • bugfix/component-descriptions
  • bugfix/pdf-consumer-fixes
  • bugfix/scorecard-producer
  • bugfix/trufflehog-missing-vendor-name-in-pr-commenter
  • bugifx/pdf-consumer-file-path
  • bugifx/pdf-format
  • bugifx/pdf-format-2
  • cdxgen-v1
  • checkov
  • close-713-port-reachability-to-new-sdk
  • codeql-javascript-own-container
  • codeql-producer
  • codeql-producer-compiled-languages
  • debug-jira
  • default-temp-dir
  • defectdojo-to-ocsf
  • elasticsearch-component-yaml
  • elasticsearch-to-new-sdk
  • elixir-sast
  • example-zap-with-script-orchestration
  • exploitability-enrichment
  • feature/440/changelog-utility
  • feature/PythonSDKsmithyctlreadme
  • feature/convert-pdf-consumer-to-new-sdk
  • feature/ocsf_tests_old_path
  • feature/ocu-221-implement-embedded-storage-backend-reader-and-writer
  • feature/ocu-221-implement-embedded-storage-backend-reader-and-writer-pt-2
  • feature/oscf_tests
  • feature/saas-604-switch-saas-to-use-oss-v1-data-types
  • filter_component
  • fix-SAAS-1025-bandit-explodes-with-line-ranges
  • fix-codeql-helm-template
  • fix-custom-annotaiton-enricher
  • fix-data-propagation-snyk
  • fix-flaky-zap-test
  • fix-pip-audit-experience
  • fix-readme
  • fix-revive-ignore-rules
  • fix-trufflehog
  • fix-zap-metadata-propagation
  • fix-zap-packaging
  • fix/semgrep-paths
  • fix_dev_components
  • github-link-enricher
  • hack-hack
  • image-go-getter
  • k8s-clientset-debug-log-object
  • kics
  • localfileloader-filepath
  • main
  • make-bandit-run
  • make-battlecard-actually-print-battlecard
  • make-pdf-reporter-upload-to-configurable-s3-backends
  • make-scanners-not-exit-on-0-findings
  • make-scanners-with-wrapped-tools-flat-dirs
  • make-slack-work-as-discord
  • make-snyk-producers-produce-at-least-an-empty-result
  • make-trivy-have-scanner-and-package
  • make-zap-wait-for-passive-scan
  • make-zaproxy-report-telemetry
  • minor-improvement-for-checkov
  • mobscan
  • mobsf
  • nancy-to-new-sdk
  • new_bandit_component
  • new_trufflehog_component
  • nits
  • nscuro-patch-1
  • opencreEnrichers
  • pip-safety-to-ocsf
  • pretty-results-printer
  • ptruscott/feature/data-enrichement-proto-messages
  • ptzianos-northdpole/extend-artefact-fetcher
  • ptzianos/add-labels-to-oci-packages-and-nits
  • ptzianos/add-make-targets-for-tags
  • ptzianos/add-more-docs
  • ptzianos/add-package-writing-permission
  • ptzianos/add-parameters-to-zap
  • ptzianos/add-values-to-enum
  • ptzianos/allow-component-params-with-no-value
  • ptzianos/allow-targets-to-propagate-metadata
  • ptzianos/bugfix-for-scanner-sdk
  • ptzianos/bugfix-stdout-report
  • ptzianos/build-images-with-smithyctl
  • ptzianos/cleanup-deprecated-components
  • ptzianos/cleanup-leftover-pipeline
  • ptzianos/cleanup-migrations
  • ptzianos/cleanup-some-refs
  • ptzianos/codeql-v0-sdk-fix
  • ptzianos/deprecate-git-clone-results
  • ptzianos/ensure-zap-results-have-guids
  • ptzianos/extend-data-source-proto
  • ptzianos/extend-ocsf-validation-helpers
  • ptzianos/extend-smithyctl-and-sdk-for-target-metadata-injection
  • ptzianos/filter-out-jira-investigated-findings
  • ptzianos/fix-component-image-pushing-and-docs
  • ptzianos/fix-component-path-publish-workflow
  • ptzianos/fix-container-generation-of-mobsf
  • ptzianos/fix-go-versions-and-action-caching
  • ptzianos/fix-gosec-params
  • ptzianos/fix-image-push-flag
  • ptzianos/fix-invocation-of-custom-image-targets
  • ptzianos/fix-make-target
  • ptzianos/fix-packaging-components
  • ptzianos/fix-parameter-types-typo
  • ptzianos/fix-path-reporting-of-zap
  • ptzianos/fix-permissions-for-proto-gen
  • ptzianos/fix-revive
  • ptzianos/fix-sdk-version-resolution
  • ptzianos/fix-typo-in-sdk
  • ptzianos/fix-version-tag-of-packaged-components
  • ptzianos/fix-workflow-run-build-labels
  • ptzianos/force-users-to-set-executable-paths
  • ptzianos/gha-producer-improvements
  • ptzianos/github-codeql-runner-fixes
  • ptzianos/improve-component-logging-output
  • ptzianos/improve-fmt-job
  • ptzianos/improve-sdk-ocsf-validation
  • ptzianos/improve-snyk-node-folder-discovery
  • ptzianos/improve-tagging-targets
  • ptzianos/imrpove-sdk-testing-utils
  • ptzianos/integrate-docker-creds-to-smithyctl
  • ptzianos/make-component-step-image-resolution-more-flexible
  • ptzianos/make-helpers-and-dependency-updates
  • ptzianos/minor-makefile-cleanup
  • ptzianos/ocu-502/allow-dynamic-volume-provisioning
  • ptzianos/ocu-503/build-component-helper-images
  • ptzianos/ocu-530/allow-git-clone-to-manage-pr-refs
  • ptzianos/package-and-release-smithyctl
  • ptzianos/pass-push-signal-to-custom-image-building
  • ptzianos/prevent-codeql-images-from-overwriting-each-other
  • ptzianos/push-auth-creds-to-custom-images
  • ptzianos/refactor-linters-to-catch-all-components
  • ptzianos/refactor-osv-scanner
  • ptzianos/refactor-workspaces
  • ptzianos/reintroduce-deduplication-db-migrations
  • ptzianos/reintroduce-scripts
  • ptzianos/reintroduce-third-party-scripts
  • ptzianos/remediation-enrichment-type
  • ptzianos/remove-tekton-from-clientset
  • ptzianos/remove-trufflehog-debug-echo
  • ptzianos/remove-unused-sobelow-var
  • ptzianos/sdk-updates-for-zap
  • ptzianos/simplify-git-clone-component
  • ptzianos/smithy-576/improve-zap-entrypoint-subprocess-management
  • ptzianos/smithy-582/print-error-stacktraces
  • ptzianos/smithy-612/batch-findings
  • ptzianos/smithy-614/paginate-everything
  • ptzianos/smithy-631/add-default-high-severity-to-trufflehog
  • ptzianos/smithyctl-dynamic-image-resolution
  • ptzianos/smithyctl-packaging-and-building-improvements
  • ptzianos/source-code-artefact/improve-target-metadata
  • ptzianos/trivy-finding-ids
  • ptzianos/update-all-components-to-sdk-v0.0.18-alpha
  • ptzianos/update-sdk-env-dep-to-v0.0.3
  • ptzianos/update-zap-sarif-to-ocsf-transformer
  • ptzianos/update-zap-sdk
  • ptzianos/update-zaproxy-sarif-transformer-library
  • ptzianos/update-zaproxy-sdk-to-v0.0.16
  • ptzianos/use-release-action-instead-of-artifact-upload
  • ptzianos/v1-sdk-components
  • refactor-zap-make-it-less-memory-hungry
  • remove-rules-silencing-zap
  • remove-unused-env-var
  • revampt-docs
  • saibamo-patch-1
  • saibamo/add-python-sdk-classes
  • saibamo/add-python-test-github-actions
  • saibamo/add_correct_install_python_sdk_readme
  • saibamo/add_new_enrichment_type_for_git_intel
  • saibamo/add_note_to_git_history_enrichment
  • saibamo/add_python_sdk_fix
  • saibamo/debug_python_sdk_grpc_problems
  • saibamo/fix_auto_proto_gen_python
  • saibamo/fix_git_dependencies_in_pyproject_toml_causing_errors
  • saibamo/fix_logger_error_in_enricher
  • saibamo/fix_readme
  • saibamo/improve_imports_python_sdk
  • scanner-mapping-instructions
  • semgrep-to-ocsf
  • semgrep-with-rules
  • senglezou/credo-improvements
  • senglezou/fix-sobelow-readme
  • senglezou/sobelow-improvements
  • set-target-type-trivy
  • set-vendor-info-for-vulnerabilities
  • slack-to-new-sdk
  • smithy-643-update-elasticsearch-client-version
  • snyk-proxy
  • snyk-sbom
  • sobelow-support-for-empty-findings
  • spain-2025-talks
  • status-investigation-protos
  • trivy-to-ocsf
  • unified-snyk
  • unify-code-ql
  • update-credo-sarif-pkg
  • update-credo-sobelow-components
  • update-credo-sobelow-components-2
  • update-make-file-to-work-on-macos-as-well
  • update-sobelow-to-supported-version
  • zap-browser-based-auth
  • zap-nit-make-unauthenticated-scan-more-verbose
  • zap-open-api
  • zap-to-ocsf
  • zap_orchestration_with_only_python

17 Sep 2025 09:14AM UTC coverage: 4.811%. First build
17792750635

Pull #1093

github

web-flow
Merge fbdce14b7 into 271f66aed
Pull Request #1093: Update osv-scanner to use the new sarif package

1797 of 37351 relevant lines covered (4.81%)

0.43 hits per line

Relevant lines Covered
Build:
Build:
37351 RELEVANT LINES 1797 COVERED LINES
0.43 HITS PER LINE
Source Files on SAAS-7700-update-sarif-package
  • Tree
  • List 36
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
17792750635 SAAS-7700-update-sarif-package Merge fbdce14b7 into 271f66aed Pull #1093 17 Sep 2025 05:01PM UTC web-flow github
4.81
17773035543 SAAS-7700-update-sarif-package Merge 885f4a7c7 into 271f66aed Pull #1093 16 Sep 2025 05:13PM UTC web-flow github
4.39
See All Builds (1024)

Badge your Repo: smithy

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc