aboutcode-org / aboutcode-org/vulnerablecode
Advisory versioning to avoid duplication and track changes
Aberta
- Linguagem predominante
- Python
- Estrelas
- 702
- Forks
- 328
- Merge médio
- 3d 8h
- PRs com merge (30d)
- 3
Descrição
ATM whenever import pipeline encounters an advisory with modified content, it treats it as a new advisory. This makes it harder to track changes in advisories over time. Instead of treating modified advisories as new ones, we should start versioning the advisory. To do this we can use aliases like CVE, GHSA, PySec. Whenever pipeline receives a modified content for given alias, it should store the modified content as a new version of the existing advisory (imported from the same pipeline).
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Avaliação
Esta issue ainda não foi avaliada.