DependencyTrack / DependencyTrack/dependency-track

Add PURL support to VulnDB analyzer

Open
#885 1 comment 0 reactions 1 assignee Claimed by @stevespringett View on GitHub
blocked enhancement p1
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

VulnDB now supports PURL and has a dedicated endpoint for making queries.

See: https://vulndb.cyberriskanalytics.com/doc/classes/Api/V1/VulnerabilitiesController.html#method-i-find_by_purl

Additionally, VulnDB mirroring should include PURLs so that the Internal Analyzer can make use of them.

Note: It appears that VulnDB PURLs conform to the spec, but there are some issues. Support ticket opened.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.