aboutcode-org / aboutcode-org/vulnerablecode

Import VEX data

Aperta
#1,346 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
702
Fork
328
Merge medio
3g 8h
PR unite (30g)
3

Descrizione

It would be great to import VEX data when available to supplement the vulnerability and promote more efficient scoring and triage.

We have these issues to deal with the low level importers:
- https://github.com/nexB/vulnerablecode/issues/1122
- https://github.com/nexB/vulnerablecode/issues/1344
- https://github.com/nexB/vulnerablecode/issues/1345

There will likely either be some index of such documents that will emerge.

- @sethmlarson is specifically working on something for CPython https://sethmlarson.dev/security-developer-in-residence-weekly-report-19

- There is also related work in this area at https://github.com/anchore/grype/issues/1365

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.