aboutcode-org / aboutcode-org/vulnerablecode
Add CVE as reference in existing importers
Open
feature
import-improver-migration
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
Some importers (eg https://github.com/nexB/vulnerablecode/blob/87ffa8109e4f5dcb22b4c8d71eaf1711c82068d7/vulnerabilities/importers/istio.py#L201-L204, https://github.com/nexB/vulnerablecode/blob/87ffa8109e4f5dcb22b4c8d71eaf1711c82068d7/vulnerabilities/importers/alpine_linux.py#L174) do not add the CVE as a reference when it already exists as `vulnerability_id`.
This has been discussed here: https://github.com/nexB/vulnerablecode/pull/393#discussion_r609769729
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.