DependencyTrack / DependencyTrack/dependency-track
Reactive scan with new CVE detected
Open
enhancement
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Hi
This maybe exists already, but if not, it would be a great enhancement.
I assume NVD database is constantly updated (every 4 hours of so). I have my component XXX.YYY:1.0.1, when i ingest the data in DT, it is not vulnerable, but suddenly, 3 days later, it is vulnerable.
It would be great if it could re-scan all the dependencies tracked in the tool against the new vulnerabilities in the incremental NVD update, and also display in a dashboard the new components that have become vulnerable
Thanks
Contributor guide
Assessment
This issue has not been assessed yet.