zakrush

Hi. Can you add flag for setup timeout by cov update time. I really need to stop the fuzzing when coverage don't changes for some time.

Permission denied when build semgrep image

7

It bug was discussed into slack: https://r2c-community.slack.com/archives/CK86BJ5DW/p1657044622433309 **Describe the bug** When build image locally I get `The command '/bin/sh -c scripts/install-tree-sitter-lib' returned a non-zero code: 1` **To Reproduce** ``` git...

Incorrect deduplication when reimporting with endpoint

4

**Be informative** When dd is using endpoint for deduplication it incorrect calculate hascode for reimport scan. I see it from 2.4.1 of defectdojo. Now I upgrade it to 2.9.1 and...

Exclude flag no working with exclude-after-remap

2

## Link to bug demonstration repository I'm use complited cov.json that was generated by https://gitlab.com/gitlab-org/security-products/analyzers/fuzzers/jsfuzz In my case I give many cov.json from different jobs of tool above. Every job...

vagrant don't up

2

Hello. I can't up your vagrantfile on ubuntu server 17.10 artful I'm get ``` dev@ubuntu:~/dso_repos/bootcamp$ vagrant destroy devsecops: Are you sure you want to destroy the 'devsecops' VM? [y/N] y...

How are you calculate severity for report? I writing a plugin for trivy and found that vulns that have CVSSv3 => 7 (High and Critical) is more than have original...