guacsec / guac

GUAC aggregates software security metadata into a high fidelity graph database.
https://guac.sh
Apache License 2.0
1.29k stars 176 forks source link

Search for Vulns via Artifact #2153

Closed nathannaveen closed 1 month ago

nathannaveen commented 1 month ago

Description of the PR

With the hasSBOM nodes being attached to artifacts as well as packages, we have to also search hasSBOM nodes via artifacts as well as packages to find vuln nodes.

This PR includes the functionality to search for vuln nodes via artifacts in addition to our already implemented functionality to search via packages.

Feature change:

PR Checklist