aboutcode-org / aboutcode-org/vulnerablecode

Advisory versioning to avoid duplication and track changes

Abierto
#1,793 2 comentarios 2 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

ATM whenever import pipeline encounters an advisory with modified content, it treats it as a new advisory. This makes it harder to track changes in advisories over time. Instead of treating modified advisories as new ones, we should start versioning the advisory. To do this we can use aliases like CVE, GHSA, PySec. Whenever pipeline receives a modified content for given alias, it should store the modified content as a new version of the existing advisory (imported from the same pipeline).

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.