DependencyTrack / DependencyTrack/dependency-track
Add PURL support to VulnDB analyzer
Open
blocked
enhancement
p1
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
VulnDB now supports PURL and has a dedicated endpoint for making queries.
See: https://vulndb.cyberriskanalytics.com/doc/classes/Api/V1/VulnerabilitiesController.html#method-i-find_by_purl
Additionally, VulnDB mirroring should include PURLs so that the Internal Analyzer can make use of them.
Note: It appears that VulnDB PURLs conform to the spec, but there are some issues. Support ticket opened.
Contributor guide
Assessment
This issue has not been assessed yet.