The Wayback Machine - https://web.archive.org/web/20220408042815/https://github.com/topics/cve-scanning
Skip to content
#

cve-scanning

Here are 48 public repositories matching this topic...

LunaSec - Open Source AppSec platform that automatically notifies you the next time vulnerabilities like Log4Shell or node-ipc happen. Track your dependencies and builds in a centralized service. Get started in one-click via our GitHub App or host it yourself. https://github.com/apps/lunatrace-by-lunasec/

  • Updated Apr 7, 2022
  • TypeScript
knightsg
knightsg commented Mar 4, 2022

It would be very handy for us if we could target specific package versions in the --module-ignore flag so that we don't have to come back and manually update our whitelists once we update problematic package versions. For example:

1. We have included package_A v1.2.3.
2. better-npm-audit audit -l high fails because of an issue with a subpackage of package_A v1.2.3.
3. We exclude it using
enhancement good first issue

Improve this page

Add a description, image, and links to the cve-scanning topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the cve-scanning topic, visit your repo's landing page and select "manage topics."

Learn more