Vulnerability Management for packages

eclipse-sw360 / sw360

SW360 project

https://www.eclipse.org/sw360/

Other

116 stars 96 forks source link

Open afsahsyeda opened 10 months ago

afsahsyeda commented 10 months ago

Vulnerabilities should be tracked at the package level.

Create a Vulnerabilities tab on the package details page for tracking each package
At the project level, currently, only release ids are sent for monitoring. After this feature, package ids should be sent instead of the release id they are linked to. If a release does not have any linked packages in the project, send its release id itself.

KoukiHama commented 10 months ago

Very Good Idea. Do you have plans for implementation or just ideas?

afsahsyeda commented 10 months ago

Yes, a plan has been formulated and the work should start next week