Support the Debian package format

clearlinux / cve-check-tool

Original Automated CVE Checking Tool

GNU General Public License v2.0

204 stars 78 forks source link

Support the Debian package format #25

Open ikeydoherty opened 8 years ago

ikeydoherty commented 8 years ago

This can quite simply be achieved via a transition to libarchive and then parsing the files. We'll need to know how to deal with both source and binary versions, for now we'll just use the source data (debian/control, etc,)

jeremiah commented 6 years ago

Is this still on the roadmap? Is there a way to use cve-check-tool on debian-based systems?

phra commented 6 years ago

definitely, a nice to have. :+1:

marium027 commented 5 years ago

I want to write a plugin for debian packages. Can i get it from anywhere like its written for rpm in cve-check-tool. I want to check cve for debian source packages using this tool.

marium027 commented 5 years ago

One more thing is for rpm we cve-check-tool used .spec file to scan a package whereas for debian which file will be used for the same purpose??