-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Jenkins advisories parser #7
Comments
@pedrohc Do we care about parsing vulnerability data for Jenkins plug-ins as well? Or just Jenkins core? I don't see CVSS scores anywhere on the pages you linked, I don't think the Jenkins project uses CVSS. |
@mprpic Yes, we care. we have about 104 entries in the manifests under jenkins-2-plugins. Script-security plugin is the most usual. The CVSS score vector can be found towards the end of the page, in the impact link (ex. moderate, high). You can just grab and parse the vector form the link and then trasnform it into RH vector. |
Not sure if this is applicable anymore, but jenkins advisories are now posted as xml |
Please add a parser for Jenkins advisories. Data that can be retrieved:
References:
https://jenkins.io/security/advisory/2019-09-25/
The text was updated successfully, but these errors were encountered: