ossf-cve-benchmark icon indicating copy to clipboard operation
ossf-cve-benchmark copied to clipboard

Support CVEs from non-git and non-github repositories

Open esbena opened this issue 4 years ago • 0 comments

The simple data format for benchmark CVEs supports arbitrary revision control systems and hosts, but the only data in there is currently for git repositories that are hosted on github.com.

As a consequence, the implementation currently only supports the git protocol and various github.com related URLs. It would be great to support additional revision control systems (svn, ...), and repository hosts (gitlab, bitbucket, ...), but support should be backed by a few actual CVEs from the wild.

esbena avatar Dec 09 '20 13:12 esbena