Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Vulnerability Intelligence functionality to ElectricEye #127

Closed
jonrau1 opened this issue May 23, 2023 · 0 comments · Fixed by #129
Closed

Add Vulnerability Intelligence functionality to ElectricEye #127

jonrau1 opened this issue May 23, 2023 · 0 comments · Fixed by #129
Assignees
Labels
documentation Improvements or additions to documentation enhancement New feature or request

Comments

@jonrau1
Copy link
Owner

jonrau1 commented May 23, 2023

Now that multiple clouds with native vulnerability management solutions are included in EE, it's time to add in some risk-based vuln management bullshit

First pass should use one of ExploitDB, MSTIC or CISA KEV to correlate against CVEs reported by Inspector, ECR, Oracle Scanners, GCP, et al

Longer term may require another client library to cache it all in memory before hand or have them written to a file of some sort - storage should be less of an issue than memory depending on how many sources we end up messing around with

@jonrau1 jonrau1 added documentation Improvements or additions to documentation enhancement New feature or request labels May 23, 2023
@jonrau1 jonrau1 self-assigned this May 23, 2023
@jonrau1 jonrau1 added this to To do in ElectricEye Roadmap via automation May 23, 2023
@jonrau1 jonrau1 moved this from To do to Doing in ElectricEye Roadmap May 31, 2023
ElectricEye Roadmap automation moved this from Doing to Done Jun 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request
Projects
1 participant