search

intel / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
https://cve-bin-tool.readthedocs.io/en/latest/
GNU General Public License v3.0
1.23k stars 464 forks source link

May I ask which checker functions are powerful #4497

Open chenjianquan7 opened 1 month ago

chenjianquan7 commented 1 month ago

There are too few checkers being tested now. Do you have a fully tested checker? Please give some suggestions

terriko commented 1 month ago

Hey, I'm not sure what you're looking for here, but all the checkers should have tests. You can read through the tests in the test/ directory if you're curious about how they work.

Note that the tests only run in "long test" mode right now because checking 300+ checkers in every run was a lot. You can read more about how to enable those tests locally in our test readme here: https://github.com/intel/cve-bin-tool/blob/main/test/README.md