Revisions of vexctl
Ana Guerrero (anag+factory)
accepted
request 1225194
from
Jeff Kowalczyk (jfkw)
(revision 2)
initialized devel package after accepting 1225194
Jeff Kowalczyk (jfkw)
accepted
request 1225193
from
Jeff Kowalczyk (jfkw)
(revision 1)
New package vexctl version 0.3.0 is a CLI tool to create, apply, and attest VEX (Vulnerability Exploitability eXchange) data. Its purpose is to help with the creation and management of VEX documents that allow "turning off" security scanner alerts of vulnerabilities known not to affect a product. VEX can be thought of as a "negative security advisory". Using VEX, software authors can communicate to their users that an otherwise vulnerable component has no security implications for their product.
Displaying all 2 revisions
