DependencyTrack / DependencyTrack/dependency-track
Add support for Gitlab Advisory Database
Open
enhancement
p2
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Dependency Track has support for various vulnerability / advisory databases. Adding more could improve the accuracy, as especially Sonatype OSS index is quite slow to fix missing/wrong advisories.
### Proposed Behavior:
Add support for Gitlab advisory database, as can be found on https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/tree/master/
Contributor guide
Assessment
This issue has not been assessed yet.