GUAC Roadmap

Optimized Ent backend (with PostgreSQL) issues
Complete CDX VEX Support #1148
Licensing usecases
- CDX parser for licenses
- Clearly defined collector (clearlydefined.io)
Solve NATS ingestion size limit by referencable blobs and enable referencable blobs to evidence store #731
Container layerID representation and parsing #977
REST API #1326
- Vuln query (query top level package and query vuln)
- Unified tree diff (e.g. SBOMs diff to see where they differ)
- CLI plumbing from guacone to use REST API
Gradual data improvement/slow-ingestion usecases
- SBOM Dashboard for GUAC #1483
- What's the next actionable critical dependency? #1505
- "GUAC Scorecard" for artifacts/packages #1508
Enable GraphQL Pagination #1525
UI Improvements
- SBOM Diff visualization
- Click to view more details
- Improve high level navigation
- Unknown unknowns (no scorecards, no SLSA, etc. usecase)
- Easier to read visualizations
- Data representation of software tries should be easier to manage
- Show sizable amount of information and “show more” for extra
GUAC "cooking show" setup - making it easy to quickstart with GUAC #1577

Provide feedback