DependencyTrack / DependencyTrack/dependency-track

Reactive scan with new CVE detected

Open
#536 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Hi

This maybe exists already, but if not, it would be a great enhancement.

I assume NVD database is constantly updated (every 4 hours of so). I have my component XXX.YYY:1.0.1, when i ingest the data in DT, it is not vulnerable, but suddenly, 3 days later, it is vulnerable.

It would be great if it could re-scan all the dependencies tracked in the tool against the new vulnerabilities in the incremental NVD update, and also display in a dashboard the new components that have become vulnerable

Thanks

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.