You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
takes list of "ProjectUrl, [Tags]" as Json (ProjectUrl is full: https://... and Tags is a list of string of all Tags of that project that need to be analyzed)
Comapres dependencies with CVE-Data
ONLY compare CVE-Data that was accessible/published at the time of the tag!!
Compare Tag Timestamp with cveMetadata.datePublished
Return JSON or other format that is easy to interpret, if Json make it LinkedData!:
{
ProjectUrl: ... string
Tag: ... string
TotalDirectDependencies: ... number
TotalDirectAndTransitiveDependencies: ... number
TotalDirectVulnerabilities: ... number
TotalDirectAndTransitiveVulnerabilities: ... number
TransitiveVulnerabilities: [
TransitivityDegree: ... number (0: dependency of direct dependency, 1: dep of 1st degree transitive dep)
]
HighestDirectSeverity: ... number
HighestTransitiveSeverity: {
TransitivityDegree: ... number
Severity: ... number
}
}
Technical info:
Goal is to analyse up to 1000 Maven projects at a time so there needs to be a mechanism for saving data while processing
there should NOT be another call to f.ex. clone endpoint needed by the user beforehand, cloning should be included in this endpoint with a subsequent checkout of the list of tags before deleting the project for space and keeping the analysed Data (doesnt need to be the tree, just the result Data)
The text was updated successfully, but these errors were encountered:
AC's:
Technical info:
The text was updated successfully, but these errors were encountered: