Revisions of vexctl
Ana Guerrero (anag+factory)
accepted
request 1225194
from
Jeff Kowalczyk (jfkw)
(revision 1)
New package vexctl version 0.3.0 is a CLI tool to create, apply, and attest VEX (Vulnerability Exploitability eXchange) data. Its purpose is to help with the creation and management of VEX documents that allow "turning off" security scanner alerts of vulnerabilities known not to affect a product. VEX can be thought of as a "negative security advisory". Using VEX, software authors can communicate to their users that an otherwise vulnerable component has no security implications for their product.
Displaying 1 revision
