KKloudTarus/synapse-ce

feat(cli): retain Code Quality source snapshots from CLI analyses 3 days ago

enhancement good first issue

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): VB.NET rule pack (shares the C# .NET catalog) 3 days ago

enhancement help wanted needs-grammar

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Ruby/Rails rule pack (+ tree-sitter Ruby grammar) 5 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): PHP rule pack (+ tree-sitter PHP grammar) 5 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Epic: risk-based remediation SLA and finding lifecycle 5 days ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Swift rule pack (+ tree-sitter Swift grammar) 5 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Kotlin rule pack (+ tree-sitter Kotlin grammar) 5 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): HTML rule pack (correctness + accessibility) 13 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): CSS rule pack 14 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): XML rule pack (XXE + well-formedness) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C++ rule pack (+ tree-sitter C++ grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C rule pack (+ tree-sitter C grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): C# rule pack (+ tree-sitter C# grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Azure Resource Manager rule pack (misconfig analyzer) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Scala rule pack (+ tree-sitter Scala grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Rust rule pack (+ tree-sitter Rust grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Go rule pack (+ tree-sitter Go grammar) 15 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): IPython Notebook rule pack (reuses Python over cells) 23 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Python rule pack 23 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Docker rule pack (misconfig analyzer) 23 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): language rule packs — tracker + clean-room authoring methodology (L0) 24 days ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Kubernetes rule pack - manifest hardening (misconfig analyzer) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Secrets detectors - extend the scanner to parity (~40) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Text rule pack (any-file hygiene + Trojan Source) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): JavaScript/TypeScript rule pack (+ TS grammar) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): CloudFormation rule pack (misconfig analyzer) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Node.js rule pack 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Java rule pack 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(codequality): Terraform rule pack - AWS/Azure/GCP misconfig (misconfig analyzer) 24 days ago

enhancement help wanted ready

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

feat(cli): add `synapse-cli doctor` — pre-scan preflight (what can/can't be analyzed + how to unlock full coverage) 26 days ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Release engineering: goreleaser + tagged releases with prebuilt binaries 26 days ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for LDAP injection (CWE-90) 26 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform rule: security group egress open to 0.0.0.0/0 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a CHANGELOG.md 27 days ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add CI status and Go Report Card badges to the README 27 days ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add CloudFormation misconfig scanning 27 days ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform rule: S3 bucket versioning disabled 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for insecure temporary file (CWE-377) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for ReDoS (CWE-1333) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a SAST rule for XPath injection (CWE-643) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Conan conan.lock lockfile parser (SCA, C/C++) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Julia Manifest.toml lockfile parser (SCA) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add an R renv.lock lockfile parser (SCA) 27 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Reusable GitHub Action for the Synapse scan gate 27 days ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Publish a synapse-cli container image to GHCR on release 27 days ago

enhancement help wanted

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Conda environment.yml lockfile parser (SCA) 28 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Docs: add GitLab CI and Jenkins pipeline examples 29 days ago

documentation good first issue

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Show the fixed version in SARIF SCA results (code-scanning remediation) 29 days ago

enhancement help wanted go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Add a Terraform misconfig rule: unencrypted EBS volume 29 days ago

enhancement good first issue go

KKloudTarus/synapse-ce

23

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go

#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

Open Issues Need Help