CycloneDX / CycloneDX/transparency-exchange-api

USECASE: Third Party Aggregator

Open
#202 1 comment 0 reactions 0 assignees View on GitHub
enhancement wontfix
Dominant language
Shell
Stars
113
Forks
22
Avg merge
8d 12h
Merged PRs (30d)
5

Description

In the list of TEA use cases, I see a gap where third party aggregators may want to generate an offline cache or a backup of documents. For example, some systems collect caches of CVEs by using dedicated APIs to pull batches of records. Some people may devise additional methods for deep analysis that require custom data stores, or that would otherwise tax the remote system. Other groups may want to create backups to prevent data loss due to disasters or the source provider "pulling the plug."

While the API as it exists allows for a smart system to query for all the data, I do not think it allows for efficient bulk exports, or for data updates in the form of "changed since" queries.

Note that, regardless of the implementation (or lack of implementation) for this functionality, it raises the spectre of how to handle false propagation of artefacts - one storehouse hosting contrasting information on a product than a different storehouse.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.