aboutcode-org / aboutcode-org/vulnerablecode

Import VEX data

Ouverte
#1,346 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
Python
Étoiles
702
Forks
328
Merge moyen
3 j 8 h
PR mergées (30 j)
3

Description

It would be great to import VEX data when available to supplement the vulnerability and promote more efficient scoring and triage.

We have these issues to deal with the low level importers:
- https://github.com/nexB/vulnerablecode/issues/1122
- https://github.com/nexB/vulnerablecode/issues/1344
- https://github.com/nexB/vulnerablecode/issues/1345

There will likely either be some index of such documents that will emerge.

- @sethmlarson is specifically working on something for CPython https://sethmlarson.dev/security-developer-in-residence-weekly-report-19

- There is also related work in this area at https://github.com/anchore/grype/issues/1365

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.