aboutcode-org / aboutcode-org/vulnerablecode

Collect Kubernetes advisories

未关闭
#1,661 4 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
Data collection
主要语言
Python
星标
702
派生
328
平均合并
3 天 8 小时
30 天内合并 PR
3

描述

There is a mostly unstructured JSON feed and web page at:
- web page at https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
- JSON "index" https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json
- assembled here https://github.com/kubernetes/website/tree/main/content/en/docs/reference/issues-security
- ... which mostly points to issues like in https://github.com/kubernetes/kubernetes/issues/74534 , a CVE and links ...
- to a Google groups: https://groups.google.com/g/kubernetes-announce/c/ufYd_aq4Y20/m/V3LKIffxCAAJ

This is managed by https://github.com/kubernetes/committee-security-response/blob/main/README.md#product-security-committee-psc but is mostly unusable as-is and demands complex parsing or manual handling.

Of interest, advisories like this https://groups.google.com/g/kubernetes-announce/c/ufYd_aq4Y20/m/V3LKIffxCAAJ do not point to a package proper, but to a family of container images built with a specific tool version.

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。