Issues

• Support custom external entity provider IDs at all places

  bugcomponent/devguard-apicomponent/devguard-webpriority:high
  l3montree-dev/devguard#3124 · Filter by author eliashaeussler opened on Sep 30, 2026

• Make devguard a Dependency Ingestion Platform in SLSA terms

  component/dependency-proxycomponent/devguard-api
  l3montree-dev/devguard#3109 · Filter by author timbastin opened on Sep 29, 2026

• Debian Support for our dependency proxy

  component/dependency-proxy
  l3montree-dev/devguard#3106 · Filter by author timbastin opened on Sep 29, 2026
  

• Add "Please Update" dialog to devguard is the version is outdated

  component/devguard-webgood first issue
  l3montree-dev/devguard#3105 · Filter by author timbastin opened on Sep 29, 2026
  

• Dependency proxy should support CEL rules instead of gitignore style rules

  component/dependency-proxy
  l3montree-dev/devguard#3104 · Filter by author timbastin opened on Sep 29, 2026
  1

  

• Remove dependency graph page and react flow dependency

  component/devguard-web
  l3montree-dev/devguard#3103 · Filter by author timbastin opened on Sep 29, 2026
  

• PostgreSQL should be compatible with PG-Operator (https://cloudnative-pg.io/blog/building-images-bake/)

  l3montree-dev/devguard#3102 · Filter by author timbastin opened on Sep 29, 2026
  

• Feedback for page /how-to-guides/administration/restricting-access/

  component/devguard-documentationpriority:high
  l3montree-dev/devguard#3101 · Filter by author devguard-bot opened on Sep 29, 2026

• Redmine Integration

  feature-request
  l3montree-dev/devguard#3099 · Filter by author Xenira opened on Sep 28, 2026
  7

• Return better error when trying to create an asset with an project access token

  bugcomponent/devguard-api
  l3montree-dev/devguard#3098 · Filter by author timbastin opened on Sep 28, 2026

• Vulnerability (CVE) Dashboard

  component/devguard-apicomponent/devguard-webfeature-request
  l3montree-dev/devguard#3095 · Filter by author knoobie opened on Sep 26, 2026
  1

• GHSA-2v4p-qf9q-27wj found in golang/google.golang.org/grpc@v1.80.0

  cvss-severity:highdevguardl3montree-cybersecurity/...ard-k8s-image-inventorypkg:oci/devguard-k8s-ima...ch=amd64&tag=main-amd64pkg:oci/devguard-k8s-ima...ch=arm64&tag=main-arm64risk:lowstate:open
  l3montree-dev/devguard#3094 · Filter by author devguard-bot-dev opened on Sep 26, 2026
  1

• Show unique CVE counts alongside per-artifact findings in the dashboard

  component/devguard-apicomponent/devguard-webfeature-requestpartner
  l3montree-dev/devguard#3091 · Filter by author MSOnderhu opened on Sep 25, 2026

• Clarify VEX reopen rule documentation

  component/devguard-documentation
  l3montree-dev/devguard#3090 · Filter by author refoo0 opened on Sep 25, 2026

• Interest: maintainer-change-check as a leading-indicator complement to the OSSF Malicious Packages dataset

  l3montree-dev/devguard#3083 · Filter by author presendapp opened on Sep 22, 2026
  2

• MDNix verification of dependency proxy downloads

  component/devguard-documentation
  l3montree-dev/devguard#3081 · Filter by author juliankepka opened on Sep 22, 2026
  1

  

• inspiration: onboarding workflow -> affinity-quiz

  component/devguard-web
  l3montree-dev/devguard#3078 · Filter by author 5byuri opened on Sep 22, 2026

• Scanner does not reports the same risk value as in UI

  bugcomponent/devguard-apicomponent/devguard-scannerneeds more info
  l3montree-dev/devguard#3077 · Filter by author seb-kw opened on Sep 22, 2026
  3

• Overview event stream link to ever loading code risk page (404, but no error given to user)

  bugcomponent/devguard-apicomponent/devguard-web
  l3montree-dev/devguard#3072 · Filter by author seb-kw opened on Sep 21, 2026

• Project/Group level "manage" access token leads to permission denied when creating a release for that group

  bug
  l3montree-dev/devguard#3071 · Filter by author skuethe opened on Sep 21, 2026

• PHP Dependency Proxy Support

  component/dependency-proxycomponent/devguard-api
  l3montree-dev/devguard#3070 · Filter by author timbastin opened on Sep 21, 2026
  

• Java Dependency Proxy Support

  component/dependency-proxycomponent/devguard-apipriority:high
  l3montree-dev/devguard#3069 · Filter by author timbastin opened on Sep 21, 2026
  

• GHSA-m37j-52j7-pjw7 found in golang/oras.land/oras-go/v2@v2.6.1

  cvss-severity:highdevguardl3montree-cybersecurity/...ard-k8s-image-inventorypkg:devguard/l3montree-c...ard-k8s-image-inventorypkg:oci/devguard-k8s-ima...ch=amd64&tag=main-amd64pkg:oci/devguard-k8s-ima...ch=arm64&tag=main-arm64risk:mediumsourcestate:open
  l3montree-dev/devguard#3066 · Filter by author devguard-bot-dev opened on Sep 18, 2026
  1

  

• GHSA-m37j-52j7-pjw7 found in golang/oras.land/oras-go/v2@v2.6.0

  cvss-severity:highdevguardl3montree-cybersecurity/...ard-k8s-image-inventorypkg:oci/devguard-k8s-ima...ch=amd64&tag=main-amd64pkg:oci/devguard-k8s-ima...ch=arm64&tag=main-arm64risk:mediumstate:open
  l3montree-dev/devguard#3065 · Filter by author devguard-bot-dev opened on Sep 18, 2026
  1

  

• Package Inspector: crates.io lookups return no results (tokio, tracing); C++ also affected

  bug
  l3montree-dev/devguard#3064 · Filter by author l3monKenji opened on Sep 18, 2026