boostsecurityio

boostsecurityio/poutine

poutine, a supply chain vulnerability scanner for build pipelines

Stars: 513
Forks: 40
Open beginner issues: 0
Indexed issues: 4

Dominant language: Go
License: Apache-2.0
Last GitHub push: Jul 9, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

4 open issues indexed

"inconsistent fingerprint value" warning when uploading SARIF to GitHub Code Scanning Open

boostsecurityio/poutine#387 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Exclude repo when performing org scan Open

boostsecurityio/poutine#394 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Bug: Incorrect version check in known vulnerability in build component? Open

boostsecurityio/poutine#443 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
pr_runs_on_self_hosted: ARM64 hosted runner labels misdetected as self-hosted Open

boostsecurityio/poutine#449 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

A short digest of beginner-friendly GitHub issues.