search

cconard96 / glpi-cve-plugin

Track CVEs related to software in your GLPI inventory
GNU General Public License v2.0
6 stars 4 forks source link

Use CSAF as datasource #3

Open TheRich-71 opened 3 years ago

TheRich-71 commented 3 years ago

I recently stumbled at this project, because I met the typical problem handling a medium IT-zoo: How to find out, which vulnerabilities need a fix, and how urgent is this? Now, I read this project could help me (I am using glpi already), if it was going productive, but it seems stuck i.e. due to the available databases. And finally, this morning I read that there is a new attempt called CSAF, which should deliver machine readable vulnerability reports. I cannot really evaluate, if this might be helpful for your project, but I had the feeling of some loose ends which might fit nicely together...

vollkommenIrrelevant commented 3 years ago

The author wrote in the glpi-forum that he is currently out of time and have some technical issues. :-(

cconard96 commented 3 years ago

I'm focused on core GLPI development and some other projects at the moment. I do hope to finish up some of these plugins I've started but don't have a release for yet at some point though.