aboutcode-org / aboutcode-org/vulnerablecode

Collect Kubernetes advisories

Aberta
#1,661 4 comentários 0 reações 0 responsáveis Ver no GitHub
Data collection
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

There is a mostly unstructured JSON feed and web page at:
- web page at https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
- JSON "index" https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json
- assembled here https://github.com/kubernetes/website/tree/main/content/en/docs/reference/issues-security
- ... which mostly points to issues like in https://github.com/kubernetes/kubernetes/issues/74534 , a CVE and links ...
- to a Google groups: https://groups.google.com/g/kubernetes-announce/c/ufYd_aq4Y20/m/V3LKIffxCAAJ

This is managed by https://github.com/kubernetes/committee-security-response/blob/main/README.md#product-security-committee-psc but is mostly unusable as-is and demands complex parsing or manual handling.

Of interest, advisories like this https://groups.google.com/g/kubernetes-announce/c/ufYd_aq4Y20/m/V3LKIffxCAAJ do not point to a package proper, but to a family of container images built with a specific tool version.

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.