aboutcode-org / aboutcode-org/vulnerablecode

Import VEX data

未关闭
#1,346 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
702
派生
328
平均合并
3 天 8 小时
30 天内合并 PR
3

描述

It would be great to import VEX data when available to supplement the vulnerability and promote more efficient scoring and triage.

We have these issues to deal with the low level importers:
- https://github.com/nexB/vulnerablecode/issues/1122
- https://github.com/nexB/vulnerablecode/issues/1344
- https://github.com/nexB/vulnerablecode/issues/1345

There will likely either be some index of such documents that will emerge.

- @sethmlarson is specifically working on something for CPython https://sethmlarson.dev/security-developer-in-residence-weekly-report-19

- There is also related work in this area at https://github.com/anchore/grype/issues/1365

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。