aboutcode-org / aboutcode-org/federatedcode

FederatedCode: Create VCIO importer that can pull the data straight from FederatedCode git repos

Open
#29 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

As a follow up to:
- https://github.com/aboutcode-org/federatedcode/issues/4

I would like to have VCIO importer that can pull the data straight from FederatedCode git repos.

This would be a command line to retrieve "federated" data from FederatedCode, possibly for a single PURL (or possibly as an API on demand endpoint?)

outcome:

- The summary data is pulled straight from FederatedCode git repos, using PURL as a key.
- The vulnerable package versions and vulnerability details are fetched from FederatedCode git repos (And in the future also advisories?)
- The data are imported in the DB and vulnerability with packages and their relationships created

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.