nix-security-tracker
nix-security-tracker copied to clipboard
View a list of pre-computed match suggestions
As a security team member, I want to have an overview of untriaged CVEs, displayed as a priority list.
Each item in that list should only show the most relevant information:
- CVE ID
- CVE logline
- Number of derivations affected
- Number of channels affected
The list should be sorted by some reasonable combination of
- CVE age
- CVE severity
- Relevance for Nixpkgs (e.g. number of supposedly affected derivations)
- Confidence in the matching of CVE and Nixpkgs metadata
Depends on:
- #221