DependencyTrack / DependencyTrack/dependency-track

Add support for Gitlab Advisory Database

Open
#1,397 0 comments 3 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
Dependency Track has support for various vulnerability / advisory databases. Adding more could improve the accuracy, as especially Sonatype OSS index is quite slow to fix missing/wrong advisories.

### Proposed Behavior:
Add support for Gitlab advisory database, as can be found on https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/tree/master/

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.