[feature] Upgrade go-vex dependency to a released version

guacsec / guac

GUAC aggregates software security metadata into a high fidelity graph database.

https://guac.sh

Apache License 2.0

1.26k stars 165 forks source link

[feature] Upgrade go-vex dependency to a released version #1017

Closed lulf closed 11 months ago

lulf commented 1 year ago

Is your feature request related to a problem? Please describe. The initial support for ingesting CSAF uses an unreleased version of go-vex. A released version of go-vex with CSAF support should be used instead.

Describe the solution you'd like Once https://github.com/openvex/go-vex/issues/44 is resolved, a PR should be made for guac to upgrade the go-vex version.

lumjjb commented 1 year ago

@lulf can i assign this issue to you to track when that is merged?