Show HN: Patchwork – Real-time notifications for OSS vulnerabilities

Re:Show HN: Patchwork – Real-time notifications for OSS vuln... by chatmasta on Wednesday January 13, 2016 @03:44PM (#10897343)

This would be a cool service to integrate with github badges, next to test coverage and build status. e.g. "2 UNPATCHED VULNERABILITIES" or "VULNERABILITY ASSESSMENT PASSED"

It should be simple enough to intersect the list of a project's dependencies with a list of libraries with known vulnerabilities.

If you provided this as a free service, you'd get a bunch of free advertising from the github badges, like travis-CI. :)

[ Parent | on HN ]

Re:Show HN: Patchwork – Real-time notifications for OSS vuln... by dchanm on Wednesday January 13, 2016 @04:10PM (#10897526)

Hi, our roadmap includes hooking into CI where your CI can ask our API Is the current project state vulnerable? yes) Here are a list of dependencies you need to update, run your test again no) Good, proceed with deploy

This is a little further down the roadmap, but is definitely something we want to do.

[ Parent | on HN ]