aboutcode-org / aboutcode-org/vulnerablecode

Add proprietary, non-public advisory datasources to vulntotal

Open
#1,434 1 comment 0 reactions 0 assignees View on GitHub
VulnTotal
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

It would be great to add support for proprietary data sources in vulntotal. Candidate could include: BlackDuck, vuldb, Snyk, Mend, and several other feeds. The ability to compare them all is a useful feature. The difficulty is that we do not have access to these private data, or to their API specs.

Already tracked:
- https://github.com/nexB/vulnerablecode/issues/1199
- https://github.com/nexB/vulnerablecode/issues/1108
- https://github.com/nexB/vulnerablecode/issues/835

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.