aboutcode-org / aboutcode-org/vulnerablecode
Check for inconsistent fixed and affected purl pair
Aperta
- Lingua principale
- Python
- Stelle
- 702
- Fork
- 328
- Merge medio
- 3g 8h
- PR unite (30g)
- 3
Descrizione
Inspired from _OpenChain Automation Case Study #7 – VulnerableCode technical deep dive into VulnTotal_ where _Alberto Pianon_ asked a question regarding automatically checking *inconsistencies* in VulnerableCode.
One possible data source that we already have is VulnerableCode database! An improver could:
1. Get fixed purl
2. Check if fixed purl lies in affected purls using univers
3. If yes, we've got a problem.
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.