cve-bin-tool
cve-bin-tool copied to clipboard
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or...
Each of the checkers identifies a product/vendor pair to be used if a particular component is detected in a binary file. The allows for instance an item detected as libc...
I would like to be able to overwrite the cache-dir location, but the `DISK_LOCATION_DEFAULT`is used in multiple places so that **this PR does not yet work.** related to https://github.com/intel/cve-bin-tool/issues/636
Currently only JAR archives are supported for Java applications
Work recommended some additional XML tests for the 3.0 release. I set them up and ran them as part of my internal documentation because it was easier to run them...
* From our refactoring wishlist: #1291 We're currently using the default theme for Sphinx/Read The Docs. There's nothing wrong with that; it's used by lots of python projects. But this...
* From our refactoring wishlist: #1291 While markdown has become very popular, the preferred documentation tool for Python projects is RestructuredText and there is support for better doctests through Sphinx...
We currently have a couple of tests that verify the NVD data in the yearly files against the published jsonschema. This is a widely accepted best practice to help identify...
#1258 added support for both the android and the alpine formats which both use .apk extensions. It would be nice if we had a couple of very tiny files in...
This PR adds cron workflow that attempts to update bootstrap and plotly.js libraries. After updating it then runs `test_output_html` test, generates mock HTML report and uploads it as workflow run...
A few comments on the Package List processing which is performed by cve-bin-tool. Pinging @BreadGenie for initial comment. BUG If the distribution is not supported (e.g. Kali, Raspian) the error...