Skip to content

[Feature Request] FOSSA - Vulnerability + Finding Sync #2573

Description

@golanglemonade

Adds a VulnerabilitySync integration for FOSSA. This should sync vulnerabilities/findings.

We want to pull issues
Vulnerabilities:

  • Security Vulnerabilities - Always On
    • Pull in remediation guidance
      Findings:
  • [Optional] OSS License Compliance Findings - Off By Default

The config should:

  • Ability to turn on licensing findings
  • Include setup for local testing

Ref:
FOSSA

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions