Community-driven advisory database for dependencies launched
Feb 16, 2022Mark Art

Summary
Introduced a community-driven advisory database for dependencies, a time-delayed clone of the internal GitLab Advisory Database. This open-source edition allows for community contributions and is integrated into tools like Trivy. The database uses CVE and CVSS for vulnerability communication and is integrated into GitLab Dependency Scanning and Vulnerability Pages.