anchore / vulnerability-data-tools

Apache License 2.0
12 stars 3 forks source link

feat: rudimentary cve text analyzer #6

Closed kzantow closed 7 months ago

kzantow commented 7 months ago

A rudimentary process for text analysis for CVE text to identify software products. The basic command can be run like: go run . <list-of-cves>, e.g.:

cd cve-text-analyzer
go run . --format csv CVE-2024-21502 CVE-2024-22369 CVE-2024-24758 CVE-2024-25126 CVE-2024-25625 CVE-2024-26308 CVE-2024-27133

... to output CSV. otherwise, by default it will output "override files" to .tmp/overrides.