dejacode

dejacode copied to clipboard

We expect to request help for a UI usability review for accessibility and inclusiveness. We will apply the adjustments resulting from this review feedback here.

pombredanne

CRAVEX: Create tutorials documentation

1

Create and publish step-by-step tutorials documentation

pombredanne

CRAVEX: Create usage documentation

1

Create and publish usage and reference documentation

pombredanne

CRAVEX: Alerting/notification

2

Create a system to provide a alert/notification when new, not-yet-processed vulnerabilities are uncovered

pombredanne

Propagate/mass update vulnerability exploitability determination across the portfolio to facilitate reusing triaged items

pombredanne

CRAVEX: Vulnerability exploitability: Cross product queries

1

Query for the affected vulnerable package version presence across multiple products, create UI and API accordingly.

pombredanne

Rank exploitability based on collected KEV (known exploited vulns) served by VulnerableCode: - CVSS https://github.com/nexB/vulnerablecode/issues/1473 - EPSS https://github.com/nexB/vulnerablecode/issues/1474

pombredanne

CRAVEX: Vulnerability exploitability: Identify and store a vulnerability exploitability

3

Create UI and DB models to create and store effective exploitability both org-wide and app- or product-specific. We should also include tracing data to document the disposition of a vulnerability....

pombredanne

CRAVEX: Vulnerabilities policy

10

Create UI and DB models to create and store vulnerability policy: org-wide, and product-specific policy based on purpose, destination, type of usage and other factors.

pombredanne

Extend the web UI to work on the packages of a product, reusing extra product-level package flags (such as purpose and modification), global- and product policy.

pombredanne