aboutcode-org / aboutcode-org/vulnerablecode

Import Erlang advisory in GitHub importer

Abierto
#1,063 2 comentarios 0 reacciones 0 asignados Ver en GitHub
Data collection
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

Since the [elixir_security.py](https://github.com/nexB/vulnerablecode/blob/40a39743f385bd5b6dfa3424bc72231fe1ae7456/vulnerabilities/importers/elixir_security.py) relies on https://github.com/dependabot/elixir-security-advisories, which has been archived by GitHub, we will not be able to access the most recent HEX advisories.

Solution:
- [ ] https://github.com/nexB/vulnerablecode/pull/1061 **keep it, but as a one-time importer**
- [ ] Import Erlang advisory in GitHub importer `(preferred)`
OR
- [ ] Import Hex advisory from OSV

`Erlang ecosystem => package written either in Erlang, Elixir, LFE or Joxa => Hex is the package manager for Erlang ecosystem`

Edit: [mirego/elixir-security-advisories](https://github.com/mirego/elixir-security-advisories) is the actively maintained fork of elixir-security-advisories

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.