Trylle

Loading

Search Explore Sign upCreate an account Sign In

Loading

vercel-labsvercel-labs/deepsecdeepsec

Public

SyncedPull mirror status: ok

Code Issues 28 Pull Requests 52 Releases 0 Actions

Commits · feat(osv): dependency-CVE adapter — reachable dependency CVEs (Python + Java/Maven) · vercel-labs/deepsec | Trylle

Commits on Mon, Oct 19, 2026

Nehanth
osv: feed dependency CVEs into the threat model (phase 1)
0dd95a7Oct 19

Commits on Tue, Oct 20, 2026

Nehanth
feat(osv): resolve range manifests to their version floor before scanning
9b2c795Oct 20
Nehanth
feat(osv): steer matcher generation toward reachable dependency advisories (phase 2)
48c2d37Oct 20
Nehanth
harden osv adapter per review (sandbox, injection, cancellation, checkpoints)
1fddd96Oct 20
Nehanth
feat(osv): Java/Maven dependency-CVE resolution via syft SBOM (stacked on #190)
1fde213Oct 20
Nehanth
harden osv adapter (round 2): SSRF, failure-state, checkpoints, false-positives
f871930Oct 20
Nehanth
fix(osv): don't accumulate stale advisory sections in preserved INFO.md
2223629Oct 20
Nehanth
feat(osv): make dependency-CVE enrichment opt-in (default off)
12c182aOct 20
Nehanth
feat(osv): add --osv CLI flag to init/setup
5c22527Oct 20
Nehanth
docs(osv): document the opt-in dependency-CVE adapter
d983ea0Oct 20

Commits on Wed, Oct 21, 2026

Nehanth
feat(osv): grade dependency reachability and promote reachable CVEs
e5d681fOct 21
Nehanth
fix(osv): keep fresh reachability verdicts when enabling osv on an existing INFO.md
dfe75b8Oct 21
Nehanth
fix(osv): address review findings in the dependency-CVE adapter
7ac1bc0Oct 21