aboutcode-org / aboutcode-org/vulnerablecode
RFC: vulnerability reachability
- Linguagem predominante
- Python
- Estrelas
- 702
- Forks
- 328
- Merge médio
- 3d 8h
- PRs com merge (30d)
- 3
Descrição
Vulnerability reachability is to check if vulnerable code is reachable or not.
This is important to help triage vulnerabilities.
Some of the things to consider:
- [x] Collecting introducing/fix commits or patches to find vulnerable functions
- [x] https://github.com/nexB/vulnerablecode/issues/207
- [x] Include commits and patches that introduce a vulnerability
- [x] https://github.com/nexB/vulnerablecode/issues/327
- [ ] Finding the path in the affected package code graph to the vulnerable functions
- [ ] Finding the path in the codebase under analysis that may use the affected package vulnerable functions
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Avaliação
Esta issue ainda não foi avaliada.