aboutcode-org / aboutcode-org/vulnerablecode

Import VEX data

未關閉
#1,346 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Python
星號
702
分支
328
平均合併
3 天 8 小時
30 天內合併 PR
3

描述

It would be great to import VEX data when available to supplement the vulnerability and promote more efficient scoring and triage.

We have these issues to deal with the low level importers:
- https://github.com/nexB/vulnerablecode/issues/1122
- https://github.com/nexB/vulnerablecode/issues/1344
- https://github.com/nexB/vulnerablecode/issues/1345

There will likely either be some index of such documents that will emerge.

- @sethmlarson is specifically working on something for CPython https://sethmlarson.dev/security-developer-in-residence-weekly-report-19

- There is also related work in this area at https://github.com/anchore/grype/issues/1365

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。