aboutcode-org / aboutcode-org/vulnerablecode
Report vulnerabilities associated with an SBOM/PURL inventory
Open
Data collection
enhancement
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
We've developed a private script that takes an SBOM/PURL inventory as input, vets the PURLs with the VulnerableCode DB, and outputs a vulnerability report as a `.xlsx` file. We plan to use this script as the basis for integrating this capability into [ScanCode.io](https://github.com/nexB/scancode.io).
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.