aboutcode-org / aboutcode-org/vulnerablecode
Check for inconsistent fixed and affected purl pair
Open
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
Inspired from _OpenChain Automation Case Study #7 – VulnerableCode technical deep dive into VulnTotal_ where _Alberto Pianon_ asked a question regarding automatically checking *inconsistencies* in VulnerableCode.
One possible data source that we already have is VulnerableCode database! An improver could:
1. Get fixed purl
2. Check if fixed purl lies in affected purls using univers
3. If yes, we've got a problem.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.