GitLab

Community-driven advisory database for dependencies launched

Feb 16, 2022Mark Art
Community-driven advisory database for dependencies launched
SummaryAI, from the source post

Introduced a community-driven advisory database for dependencies, a time-delayed clone of the internal GitLab Advisory Database. This open-source edition allows for community contributions and is integrated into tools like Trivy. The database uses CVE and CVSS for vulnerability communication and is integrated into GitLab Dependency Scanning and Vulnerability Pages.

More from the FIPS Package Dependency Management trail