safedep / safedep/cli

[Future Issue]: Jfrog Xray event creation with version for OSV Ranges.

Open
#48 0 comments 0 reactions 1 assignee View on GitHub

@KunalSin9h is already working on this.

Since Aug 25, 2026.

Dominant language
Go
Stars
4
Forks
0
Avg merge
5h 55m
Merged PRs (30d)
9

Description

Currently we only ingest 2 types of version from our threat-intel feed:

  • []string{} empty, for all versions
  • []string{a, b, c}, for specific versions

but when we support OSV feeds in threat intel, then OSV can have ranges, like Introduced -> Fixed version, while Jfrog do support ranges in version, this is not handled currently, from the Threat Intel level itself.

So this is something to keep an eye on threat intel

If threat intel in future introduced range based versions:

then we can use this for extending the ranges in Jfrog Event.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.