fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Use GH Advisory repository instead of GraphQL #122

Open mir-am opened 2 years ago

mir-am commented 2 years ago

Currently, GHParser uses GH GraphQL to get vulnerability data. This can be slow due to the API rate limit. A better alternative way is to get vulnerabilities directly from GH Advisory repository here.