search

nexB / vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
https://public.vulnerablecode.io
Apache License 2.0
505 stars 186 forks source link

Collect data from Anchore NVD overrides #1437

Open pombredanne opened 4 months ago

pombredanne commented 4 months ago

See https://github.com/anchore/nvd-data-overrides

poju3185 commented 4 months ago

Could I work on this? My approach would be adding an importer anchore.py

poju3185 commented 4 months ago

I've noticed that the data from this data source itself cannot become an advisory. Should I instead modify nvd.py so that it can also utilize the information from nvd-data-overrides when getting advisory_data?