aboutcode-org / aboutcode-org/vulnerablecode

v30 changelog highlights

Aberta
#936 0 comentários 0 reações 0 responsáveis Ver no GitHub
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

- Enhanced models and migrated Nginx, Github, Alpine, NVD, OpenSSL and Redhat Importer.
- Enhanced the web UI with a brand new UI based on the same overall look and feel as [ScanCode.io](http://scancode.io/).
- Added new importers like PYSEC, Pypi and GitLab
- Added aliases of a vulnerability in the API vulnerabilities/ endpoint.
- Added a new `cpe/` API endpoint to lookup for vulnerabilities by CPE and another aliases/ endpoint to lookup for vulnerabilities by aliases
- Added bulk search support for CPEs.
- Added fixed packages in vulnerability details in packages endpoint
- Enhanced Package endpoint will give fixed packages of only those that matches type, name, namespace, subpath and qualifiers of the package queried.
- Added filters for vulnerabilities endpoint to get fixed packages in accordance to the details given in filters: For example, when you call the endpoint this way ``/api/vulnerabilities?type=pypi&namespace=foo&name=bar``, you will receive only fixed versioned purls of the type ``pypi``, namespace ``foo`` and name ``bar``.
- Added is_vulnerable property to fixed and affected package in packages endpoint
- Added authentication for REST API endpoint.
- Added data license CC-BY-SA-4.0 as this is the highest common denominator license among all the data sources we collect and aggregate.

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.