You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/source/advisory-todos.rst
+31-14Lines changed: 31 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,34 +4,50 @@ Advisory Todos
4
4
==============
5
5
6
6
Overview
7
-
----------
8
-
The Advisory To-Dos queue contains security advisories that require manual review to improve the quality and
9
-
accuracy of vulnerablecode data
7
+
--------
8
+
9
+
The Advisory To-Dos queue contains security advisories that require
10
+
manual review to improve the quality and accuracy of VulnerableCode
11
+
data.
10
12
11
13
Supported Advisory Curation Types
12
-
------------------------------------
14
+
---------------------------------
13
15
14
-
Our advisory curation process supports enriching and validating the following vulnerability advisory metadata, depending on the information available from trusted sources:
16
+
Our advisory curation process supports enriching and validating the
17
+
following vulnerability advisory metadata, depending on the information
18
+
available from trusted sources:
15
19
16
20
* **Package Curation**: See :ref:`advisory-package-curation`.
17
21
18
22
- Advisories with conflicting **fixed** package versions.
19
23
- Advisories with conflicting **affected** package versions.
20
-
- Advisories with conflicting **affected** and **fixed** package versions.
21
-
- *(Not currently supported)* Advisories missing affected package versions.
22
-
- *(Not currently supported)* Advisories missing fixed package versions.
23
-
- *(Not currently supported)* Advisories missing both affected and fixed package versions.
24
+
- Advisories with conflicting **affected** and **fixed** package
25
+
versions.
26
+
- *(Not currently supported)* Advisories missing affected package
27
+
versions.
28
+
- *(Not currently supported)* Advisories missing fixed package
29
+
versions.
30
+
- *(Not currently supported)* Advisories missing both affected and
31
+
fixed package versions.
32
+
33
+
* **Severity Curation**: Advisories with conflicting CVSS vectors
34
+
(CVSSv3, CVSSv3.1, and CVSSv4). See
35
+
:ref:`advisory-severity-curation`.
36
+
37
+
* **Weakness Curation**: Advisories with conflicting Common Weakness
38
+
Enumeration (CWE) identifiers. See
39
+
:ref:`advisory-weakness-curation`.
24
40
25
-
* **Severity Curation**: Advisories with conflicting CVSS vectors (CVSSv3, CVSSv3.1, CVSSv4, ...) . See :ref:`advisory-severity-curation`.
26
-
* **Weakness Curation**: Advisories with conflicting Common Weakness Enumeration (CWE) identifiers. See :ref:`advisory-weakness-curation`.
27
41
* **Summary Curation**: *(Not currently supported).*
28
42
29
-
Each curation guide provides detailed instructions for reviewing advisories in the corresponding curation queue.
43
+
Each curation guide provides detailed instructions for reviewing
44
+
advisories in the corresponding curation queue.
30
45
31
46
Accessing the Advisory To-Dos Queue
32
47
-----------------------------------
33
48
34
-
1. Go to https://public.vulnerablecode.io/.
49
+
1. Go to `public.vulnerablecode.io
50
+
<https://public.vulnerablecode.io/>`_.
35
51
36
52
2. Click **Advisory To-Dos**.
37
53
@@ -41,6 +57,7 @@ Accessing the Advisory To-Dos Queue
41
57
42
58
.. image:: images/continue-button.png
43
59
44
-
4. Search for advisories by **alias**, or filter the list by **Resolved** status or **issue type**.
60
+
4. Search for advisories by **Alias**, or filter the list by
0 commit comments