aboutcode-org / aboutcode-org/vulnerablecode
RFC: vulnerability reachability
- Lenguaje dominante
- Python
- Estrellas
- 702
- Forks
- 328
- Merge medio
- 3 d 8 h
- PR fusionados (30 d)
- 3
Descripción
Vulnerability reachability is to check if vulnerable code is reachable or not.
This is important to help triage vulnerabilities.
Some of the things to consider:
- [x] Collecting introducing/fix commits or patches to find vulnerable functions
- [x] https://github.com/nexB/vulnerablecode/issues/207
- [x] Include commits and patches that introduce a vulnerability
- [x] https://github.com/nexB/vulnerablecode/issues/327
- [ ] Finding the path in the affected package code graph to the vulnerable functions
- [ ] Finding the path in the codebase under analysis that may use the affected package vulnerable functions
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.