SBOM analysis platform for storing, correlating, and querying software bill of materials and security advisories (CSAF/VEX, OSV, CVE) at scale. Exposes a correlation graph of vuln :left_right_arrow: component :left_right_arrow: product :left_right_arrow: VEX
Rust · active 2025-09-01 → 2026-08-27 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 361 days from 2025-09-01 to 2026-08-27. Pushes: 287 total, peak 10 in a day. Pull requests: 143 total, peak 5 in a day. Issues: 33 total, peak 2 in a day. Comments: 604 total, peak 21 in a day. Stars: 6 total, peak 1 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| ctron | 241 | 20 | 30 | 119 |
| sourcery-ai[bot] | 173 | 0 | 0 | 106 |
| github-merge-queue[bot] | 123 | 123 | 0 | 0 |
| github-actions[bot] | 122 | 92 | 0 | 30 |
| helio-frota | 104 | 2 | 16 | 52 |
| jcrossley3 | 99 | 1 | 17 | 42 |
| mrizzi | 91 | 3 | 14 | 43 |
| dejanb | 72 | 9 | 7 | 27 |
| codecov[bot] | 61 | 0 | 0 | 61 |
| JimFuller-RedHat | 49 | 25 | 9 | 10 |
| trustify-ci-bot[bot] | 38 | 0 | 17 | 21 |
| bxf12315 | 37 | 1 | 9 | 17 |
| gildub | 26 | 0 | 1 | 16 |
| carlosthe19916 | 24 | 0 | 0 | 13 |
| ruromero | 20 | 0 | 3 | 10 |
| Strum355 | 19 | 3 | 2 | 8 |
| dependabot[bot] | 12 | 5 | 7 | 0 |
| mrrajan | 11 | 1 | 3 | 7 |
| i386x | 8 | 0 | 1 | 4 |
| PhilipCattanach | 7 | 0 | 0 | 6 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#2553codecov[bot]2026-07-30 19:11feat: support CISA KEV catalog ingestion and expose known-exploited data
- Pull request#2497rh-jfuller2026-07-14 17:30
- Pull request#2459trustify-ci-bot[bot]2026-07-08 00:00
- Issue comment#2456codecov[bot]2026-07-07 15:29chore: ignore CLAUDE.md
- Issue comment#2439trustify-ci-bot[bot]2026-07-02 13:53perf: remove gist indexes on qualified_purl to ensure query planner chooses optimal plan searching for packages
- Issue comment#2438sourcery-ai[bot]2026-07-01 16:10fix: set conventional commit title to the auto generated openapi PR
- Issue comment#2385codecov[bot]2026-06-09 17:30feat(tls): add configurable TLS security profile
- Issue comment#2354helio-frota2026-05-11 15:44chore!: change all APIs to v3, or mark them deprecated
- Issue comment#2351codecov[bot]2026-05-07 15:49feat!: change limit=0 to return no items and enforce maximum limit
- Issue comment#2343ctron2026-05-04 09:11fix: improve performance of advisory list
- Pull request#2345ctron2026-05-04 07:48
- Issue comment#2337trustify-ci-bot[bot]2026-04-29 07:42Add a read-only switch
- Pull request#2337ctron2026-04-27 17:18
- Issue comment#2225jcrossley32026-04-25 19:55Investigate moving to maintained CSAF library
- Issue comment#2340helio-frota2026-04-23 21:40Some tests pass on CI (at least previously) but fail locally
- Issue comment#2220ruromero2026-04-23 20:08Add trustify-cli as a subfolder with preserved history
- Pull request#2336ctron2026-04-20 09:58
- Issue comment#2332ctron2026-04-17 06:33Provide SBOM counts on the AI models summary page
- Issue comment#2329trustify-ci-bot[bot]2026-04-15 10:10feat(server): add OIDC_LOAD_USER configuration support
- Pull request#2329ctron2026-04-15 09:29
- Issue comment#2328carlosthe199162026-04-15 08:17UI CSVV Score for Vulnerability Details Page does not contain all scores
- Issue comment#2328ctron2026-04-15 08:11UI CSVV Score for Vulnerability Details Page does not contain all scores
- Issue comment#2320ctron2026-04-15 08:03perf(migration): add FK indexes on advisory child tables
- Pull request#2330mrrajan2026-04-15 07:07
- Issue comment#2320sourcery-ai[bot]2026-04-10 11:39perf(migration): add FK indexes on advisory child tables
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 6 stars here means stars gained during the window, not the repo's star count.