dejacode

dejacode copied to clipboard

Enhancement request: Retain transitive relationship between packages when importing SBOM

10

**Is your enhancement request related to a problem? Please describe.** DejaCode allows to load packages associated with a product from an SBOM. A modern SBOM that fulfills requirements such as...

rogu-beta

BUG: SBOM import does not trigger scan of packages

18

**Describe the bug** On a self-hosted instance of DejaCode, it appears that the current main branch of DejaCode does not scan individual packages after loading the SBOM. This feature seems...

rogu-beta

CRAVEX: Export VEX document: CSAF

2

Export the results of the vulnerabilities triage and processing as CSAF VEX document

pombredanne

CRAVEX: Export VEX document: CycloneDX VEX

1

Export the results of the vulnerabilities triage and processing as CycloneDX VEX document https://cyclonedx.org/capabilities/vex/ https://github.com/CycloneDX/bom-examples/tree/master/VEX

pombredanne

Introduce VEX Export Capability to DejaCode

7

Introduce VEX Support to DejaCode - enhance data model to support a Product VEX List - provide Export capabilities to product VEX documents that comply with industry-recognized formats Here are...

DennisClark

CRAVEX: Vulnerability Lookup and base app

4

We should createc a base Vulnerability application management in DejaCode with these features: - [ ] CRAVEX: Create a scheduler for vulnerability lookups that will lookup in VCIO - [...

pombredanne

Add support for VEX

5

  

ziadhany

Add filters/search for the Product Inventory

3

When working with hundred of Inventory Items you need the capability to search and filter by Item name. Some common use cases are: - Search/filter by package type - Search/filter...

mjherzog

CRAVEX: Vulnerability exploitability: Reachability integration

2

Create models and design API to integrate external tool's reachability analysis results inform vulnerability ranking

pombredanne

CRAVEX: Vulnerability exploitability: re-rank for product context and policies

1

Re-rank the exploitability scores given the org and local app/product context and policies

pombredanne