Repository navigation
fedcode-next: Extract fix commits from the change logs in search for CVE-related change entries #2001
Description
We need to create a pipeline to parse changelogs and identify entries that correspond to vulnerabilities and fix commits for well-known ecosystems.
- https://github.com/pyupio/changelogs/
- https://github.com/samaritan/archeogit
- https://github.com/django/django/blob/1167cd1d639c3fee69dbdef351d31e8a17d1fedf/docs/releases/security.txt
related issue:
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
- Status
Activity
ziadhany commentedon May 15, 2026
this is done now we have a script that collect fix-commits and git messages ( changelogs ).
see:
More work will take place in the future to refine this with: