eiffel-community / eiffel

The Eiffel framework vocabulary, descriptions, guides and schemas along with links to relevant implementation repositories.
Apache License 2.0
121 stars 59 forks source link

Document how to trace vulnerabilities #361

Open m-linner-ericsson opened 1 year ago

m-linner-ericsson commented 1 year ago

Description

The focus on supply chain security and vulnerability management has increase during recent years. Eiffel has a good support for this which we should document.

Motivation

Eiffel has a good support from this but we need to describe it.

Exemplification

A how-to/best-practice describing how a user of Eiffel can use Eiffel to trace vulnerabilities in their pipeline.

Benefits

The user of Eiffel can trace vulnerabilities with Eiffel by using the provided best practices.

Possible Drawbacks

None that I can think of