-
-
Notifications
You must be signed in to change notification settings - Fork 247
Open
Labels
Description
We are adding support for formal fix commits tracking in:
We should then collect existing fix commit datasets. Here is a running list:
- @copernico project-kb https://github.com/SAP/project-kb/tree/vulnerability-data
And the tool https://github.com/SAP/project-kb/tree/main/prospector designed to work with https://github.com/eclipse/steady . We already have an importer in https://github.com/aboutcode-org/vulnerablecode/blob/main/vulnerabilities/importers/kaybee.py for this data, but this needs to be updated for fix commits - Collect fix commits from https://github.com/google/vulncode-db/ #118
- Import data from https://github.com/nluedtke/linux_kernel_cves #564 for https://github.com/pombredanne/linux_kernel_cves now archived
- @JafarAkhondali https://github.com/JafarAkhondali/Morefixes and https://dl.acm.org/doi/abs/10.1145/3663533.3664036
- @leonmoonen https://github.com/secureIT-project/CVEfixes
- GNU Libc fix commits Add glibc advisories #1362
- Android fixes from https://github.com/quarkslab/aosp_dataset
- C/C++ fixes from https://github.com/ZeoVan/MSR_20_Code_vulnerability_CSV_Dataset
- MegaVul: A C/C++ Vulnerability Dataset with Comprehensive Code Representation - https://arxiv.org/abs/2406.12415v1
- Other datasets [https://zenodo.org/search?q=vulnerability fix commit&f=resource_type%3Adataset&l=list&p=1&s=10&sort=bestmatch](https://zenodo.org/search?q=vulnerability fix commit&f=resource_type%3Adataset&l=list&p=1&s=10&sort=bestmatch)
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
In progress