DependencyTrack / DependencyTrack/dependency-track
Fetch SLES Linux security patching information
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
Some of our products are based on SLES Linux (SUSE Linux Enterprise Server) and we have tried to use DependencyTrack for creating the SBOM and vulnerability analysis. However, we have noticed that these tools do not consider the SLES security patches, thus reporting false positive vulnerabilities that have been already fixed by SLES security patches.
### Proposed Behavior
Introduce support for fetching SLES Linux security patching information into DependencyTrack.
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.