aboutcode-org / aboutcode-org/vulnerablecode
Check for inconsistent fixed and affected purl pair
未关闭
- 主要语言
- Python
- 星标
- 702
- 派生
- 328
- 平均合并
- 3 天 8 小时
- 30 天内合并 PR
- 3
描述
Inspired from _OpenChain Automation Case Study #7 – VulnerableCode technical deep dive into VulnTotal_ where _Alberto Pianon_ asked a question regarding automatically checking *inconsistencies* in VulnerableCode.
One possible data source that we already have is VulnerableCode database! An improver could:
1. Get fixed purl
2. Check if fixed purl lies in affected purls using univers
3. If yes, we've got a problem.
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。