guacsec / guac

GUAC aggregates software security metadata into a high fidelity graph database.
https://guac.sh
Apache License 2.0
1.27k stars 170 forks source link

[question] Is this tool support to deal the json file which is produced by other tool llike ossf/criticality_score? #835

Open LikeFirstMeet opened 1 year ago

LikeFirstMeet commented 1 year ago

Question

I can't import the json file which is produced by criticality_score!

url for criticality_score : https://github.com/ossf/criticality_score the content of json file: {"default_score":"0.26270","legacy":{"closed_issues_count":0,"commit_frequency":0,"contributor_count":24,"created_since":32,"github_mention_count":0,"issue_comment_frequency":0,"org_count":0,"recent_release_count":6,"updated_issues_count":0,"updated_since":12},"repo":{"created_at":"2020-08-25T10:59:23Z","language":"C++","license":"Apache License 2.0","star_count":0,"updated_at":"2022-04-27T14:09:35Z","url":"https://github.com/laiyoufafa/aafwk_aafwk_lite"}}

jeffmendoza commented 1 year ago

No, criticality score is not a supported input format.

LikeFirstMeet commented 1 year ago

No, criticality score is not a supported input format.

Is there any plan to support criticality score input format in the furture?

mlieberman85 commented 1 year ago

Currently there isn't, but we could add it to the roadmap if you're interested. Is there a specific use case you have for it? What sort of data are you looking to correlate with the criticality score info?

LikeFirstMeet commented 1 year ago

I want to add the data for integrating criticality score on the basis of setup+demo to provide reference for subsequent project tool selection.

lumjjb commented 1 year ago

I think we'd like to potentially have some sort of free form metadata node that we can encode additional info and for those that are helpful - we would promote to being part of the ontology.. If you'd like to, if you would like to contribute:

That would create the pathway for us to ingest that document! These should be fairly simple components that are good to start as a new contributor!