Repository navigation
SCANOSS & Red Hat open sourcing contributions - #2
Merged
matiasdaloia merged 50 commits intoJul 27, 2026
Merged
Conversation
…for CBOM specification
* feat: add testing framework * feat: add crypto-finder as submodule
* Add NSS rules * Catch missing keygenerations
Fix api detection on EVP_xx() functions
…ameter set identifier, etc (#23)
…er set identifier, etc (#24) * chore(c): adapt nss rules to use algorithm family, primitive, parameter set identifier, etc * fix(c): nss test
…etc (#29) * chore(c): adapt nss rules to use algorithm family, primitive, parameter set identifier, etc (#24) * chore(c): adapt nss rules to use algorithm family, primitive, parameter set identifier, etc * fix(c): nss test chore(go): adapt go crypto rules to use algorithm family, primitive, etc chore(go): fix go tests fix(go): tests fix(go): tests * fix(go): tests
feat(go): refactor directory to help with maintaining go rules
feat(nss): Improve NSS rules
feat(go): aes dsa des tests and rule improvements
feat(go): rsa tests and improvements
fix(go): crypto.rand matching to math.rand
fix(go): xcrypto otr false positives
…n-fix fix(go): x509 and library-go mismatch on container sig verification
fix(go): xcrypto rules improvements
feat(go): reduce duplication of crypto md5 and sha rules
fix(go): reduce duplication for rand x509 and tls rules
feat(rust): add initial rust rules
…(#47) * feat(java): improve java rules dir structure, unify duplicated rules * chore(workflow): simplify test workflow by remomving app token now that crypto-finder is public * chore(test): revam testing framework * chore(test): fix failing tests * chore(test): fix failing tests * chore(test): fix test workflow
* feat(java): rule improvements * fix(java): integration tests
…e taint mode (#49) * feat(c): manual curation for C rules, use new directory structure, use taint mode * fix(c): failing tests
* feat(c): add PQC algorithms to C rules * feat(c): add options.interfile to taint mode rules
* feat(c): add openssl rules * feat: improve openssl hashing rules
* feat: add metadata.operation to algorithm rules * fix(tests): integration tests update
chore(rules): add copyright headers
fix(c): enable rules for C++ targets
Per agreement between Red Hat and ScanOSS, some selected rules will be open sourced. This commit removes the ScanOSS proprietary licensing headers from such rules as previous step to open sourcing the rulesets. Co-authored-by: Matias Daloia <matidaloia@gmail.com>
This merges contributions made by Red Hat and ScanOSS internally that are now made open source.
|
Important Review skippedToo many files! This PR contains 300 files, which is 200 over the limit of 100. To get a review, narrow the scope: Upgrade to a paid plan to raise the limit. This review couldn't start because sufficient usage credits or metered capacity aren't available. Add credits or update usage-based reviews in the billing tab, then retry. ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (300)
You can disable this status message by setting the ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
matiasdaloia
approved these changes
Jul 27, 2026
matiasdaloia
left a comment
matiasdaloia
left a comment
Collaborator
There was a problem hiding this comment.
LGTM, thanks guys! 🙌🏻
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This PR contains contributions that were made internally by both SCANOSS and Red Hat in the past months that we both agreed should now be open sourced.
Contains rulesets for:
together with their associated tests. Thank you SCANOSS team! 😄