Integration of nvd-mirror into gitlab-depscan
In the context of the issue Providing an up-to-date and searchable repository/database for CVEs we have implemented a tool (nvd-mirror) that helps us to generate a searchable up-to-date, stripped-down CVE database which is made available as a self contained docker image and that is fully under our control.
This issue tracks the integration of nvd-mirror as a data-source into gitlab-depscan.
/cc @gitlab-org/secure/vulnerability-research @joernchen @dustinmm80 @fcatteau
Edited by Julian Thome