aboutcode-org / aboutcode-org/vulnerablecode
Check for inconsistent fixed and affected purl pair
Abierto
- Lenguaje dominante
- Python
- Estrellas
- 702
- Forks
- 328
- Merge medio
- 3 d 8 h
- PR fusionados (30 d)
- 3
Descripción
Inspired from _OpenChain Automation Case Study #7 – VulnerableCode technical deep dive into VulnTotal_ where _Alberto Pianon_ asked a question regarding automatically checking *inconsistencies* in VulnerableCode.
One possible data source that we already have is VulnerableCode database! An improver could:
1. Get fixed purl
2. Check if fixed purl lies in affected purls using univers
3. If yes, we've got a problem.
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.