DependencyTrack / DependencyTrack/dependency-track

Fetch SLES Linux security patching information

Open
#3,446 1 comment 0 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Some of our products are based on SLES Linux (SUSE Linux Enterprise Server) and we have tried to use DependencyTrack for creating the SBOM and vulnerability analysis. However, we have noticed that these tools do not consider the SLES security patches, thus reporting false positive vulnerabilities that have been already fixed by SLES security patches.

### Proposed Behavior

Introduce support for fetching SLES Linux security patching information into DependencyTrack.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.