Skip to content

GSOC 2022 PROJECT

Cross-validate vulnerability coverage of VulnerableCode. VulnTotal Project!

Contributor
Keshav Priyadarshi
Mentors
TG1999, Hritik V, Shivam Sandbhor
Organization
AboutCodeSecurity
Program
GSoC 2022Completed

About this project

Description from the program archive

VulnerableCode is a unique project that collates FOSS vulnerability data from numerous sources. This VulnTotal project will help cross-validate the vulnerability coverage of VulnerableCode against publicly available vulnerability check tools. There could be scenarios where VulnerableCode might have identified certain instances of a package to be vulnerable, and the same may not be the case with the other tools. So gradually we can have arrangements with these tool providers to keep each other apprised about the newly discovered vulnerability.

Tags

From the people who did it

No proposal or progress posts shared yet

Worked on this project? Share the proposal that got you selected and the posts you wrote.

Claim this project
  1. Scancode.io/Scancode Toolkit: Create web application to scan and review a single license text

    lf32Mentored by Philippe Ombredanne, ayansinha, AvishrantSh +1

  2. Scancode Workbench improvements

    Omkar PhansopkarMentored by Philippe Ombredanne, Steven Esser, TG1999 +1

  3. Extending license detection to use licenses external to ScanCode Toolkit

    Kevin JiMentored by Philippe Ombredanne, ayansinha, Jonathan Yang

Data: Google Summer of Code public archive. This project in the official archive