Project Ideas VulnerableCode ScanCode.io CI integration

Jump to bottom

Philippe Ombredanne edited this page Mar 1, 2022 · 1 revision

ScanCode.io + VulnerableCode integrations

The goal is to create a ScanCode.io integration such that we can:

verify whether each of the packages of a project is vulnerable or not in VulnerableCode using API queries
store, report and display these results, and in particular if there is a vulnerable package detected.

See https://github.com/nexB/scancode.io/issues/101 for details

http://aboutcode.org/