guacsec/trustify

Vulnerability correlation engine that works at scale turning your data (SBOMs, CVE, advisories) into evidence from which to assert vulnerability correlations. Links vulnerability ↔ component ↔ product ↔ VEX across CSAF/VEX, OSV and CVE, and answers affectedness questions via REST API.

语言：Rust · GitHub 星标：84 · Fork：54

话题：advisories · csaf · cve · sbom · vulnerabilities

在 GitHub 上查看原仓库