vulnerablecode
vulnerablecode copied to clipboard
fedcode-next: Extract fix commits from the change logs in search for CVE-related change entries
We need to create a pipeline to parse changelogs and identify entries that correspond to vulnerabilities and fix commits for well-known ecosystems.
- https://github.com/pyupio/changelogs/
- https://github.com/samaritan/archeogit
- https://github.com/django/django/blob/1167cd1d639c3fee69dbdef351d31e8a17d1fedf/docs/releases/security.txt
related issue:
- https://github.com/aboutcode-org/vulnerablecode/issues/551