Search results

fix: accept from-provenance repos as scm authentic

bugSomething isn't workingSomething isn't working

OCA VerifiedAll contributors have signed the Oracle Contributor Agreement.All contributors have signed the Oracle Contributor Agreement.

Status: Open (in progress).

oracle/macaronnumber 1131

#1131 In oracle/macaron;

· benmss opened on Jul 22, 2025

· 

Release version 0.17.0

[Bug] - sourcecode analyzer unit tests do not run offline

bugSomething isn't workingSomething isn't working

malware analysisThe issues related to malware analysisThe issues related to malware analysis

triageThe issue needs to be triaged.The issue needs to be triaged.

Status: Open.

#1129 In oracle/macaron;

· art1f1c3R opened on Jul 21, 2025

SCM Authencitiy check should accept repositories found in provenance

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#1128 In oracle/macaron;

· benmss opened on Jul 21, 2025

· 

Release version 0.17.0

[Bug] - The build command's JDK version is reported incorrectly for pkg:maven/org.apache.hugegraph/[email protected]

bugSomething isn't workingSomething isn't working

triageThe issue needs to be triaged.The issue needs to be triaged.

Status: Open.

#1077 In oracle/macaron;

· tromai opened on May 9, 2025

[Bug] - The action_version attribute of Setup Language classes are not initialized

bugSomething isn't workingSomething isn't working

triageThe issue needs to be triaged.The issue needs to be triaged.

Status: Open.

#1076 In oracle/macaron;

· tromai opened on May 9, 2025

pkg:maven/com.simplaex/[email protected] got UNKNOWN for mcn_scm_authenticity_1, expect FAILED

bugSomething isn't workingSomething isn't working

checksThe issues related to Macaron checksThe issues related to Macaron checks

Status: Open.

#1026 In oracle/macaron;

· tromai opened on Mar 25, 2025

Wrong deploy commands reported by the build as code check for pkg:maven/dev.sigstore/[email protected]

bugSomething isn't workingSomething isn't working

Status: Open.

#937 In oracle/macaron;

· tromai opened on Dec 5, 2024

Incorrect invocation.configSource.uri value for inferred provenance value.

bugSomething isn't workingSomething isn't working

Status: Open.

#578 In oracle/macaron;

· tromai opened on Dec 21, 2023

The description for dependencies status in the HTML is ambiguous.

bugSomething isn't workingSomething isn't working

reportRelated to the HTML reportRelated to the HTML report

Status: Open.

#538 In oracle/macaron;

· tromai opened on Nov 2, 2023

· 

Change the data model to allow analysis at artifact level

CycloneDX Gradle plugin has non-detereminitic behavior

bugSomething isn't workingSomething isn't working

Status: Open.

#60 In oracle/macaron;

· behnazh-w opened on Feb 9, 2023