-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Labels
help wantedExtra attention is neededExtra attention is needed
Description
One of the goal of Vulnera is to re-implement the following Node project that was written in Python: https://github.com/nodejs/nodejs-dependency-vuln-assessments/tree/main
What's the progression:
- NVD database implementation
- GitHub Advisory database
Note that the python script is using GitHub GraphQL API to fetch vulnerability:
github_vulnerabilities_query = gql(
"""
query($package_name:String!) {
securityVulnerabilities(package:$package_name, last:10) {
nodes {
vulnerableVersionRange
advisory {
ghsaId
permalink
withdrawnAt
}
}
}
}
"""
)Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
help wantedExtra attention is neededExtra attention is needed