We are adding support for formal fix commits tracking in: - https://github.com/aboutcode-org/vulnerablecode/issues/1695 We should then collect existing fix commit datasets. Here is a running list: - [x] Android fixes from https://github.com/quarkslab/aosp_dataset - [x] @copernico project-kb https://github.com/SAP/project-kb/tree/vulnerability-data And the tool https://github.com/SAP/project-kb/tree/main/prospector designed to work with https://github.com/eclipse/steady . We already have an importer in https://github.com/aboutcode-org/vulnerablecode/blob/main/vulnerabilities/importers/kaybee.py for this data, but this needs to be updated for fix commits - and also: https://github.com/SAP/project-kb/tree/main/MSR2019 - [x] OSV data - [ ] https://github.com/aboutcode-org/vulnerablecode/issues/564 for https://github.com/pombredanne/linux_kernel_cves now archived - [ ] GNU Libc fix commits https://github.com/aboutcode-org/vulnerablecode/issues/1362 - [ ] #2129 - [ ] https://github.com/aboutcode-org/vulnerablecode/issues/118 - [ ] @JafarAkhondali https://github.com/JafarAkhondali/Morefixes and https://dl.acm.org/doi/abs/10.1145/3663533.3664036 - [ ] @leonmoonen https://github.com/secureIT-project/CVEfixes - [ ] C/C++ fixes from https://github.com/ZeoVan/MSR_20_Code_vulnerability_CSV_Dataset - [ ] MegaVul: A C/C++ Vulnerability Dataset with Comprehensive Code Representation - https://arxiv.org/abs/2406.12415v1 - [ ] Other datasets from Zenodo https://zenodo.org/search?q=vulnerability+fix+commit&f=resource_type%3Adataset&l=list&p=1&s=10&sort=bestmatch - [ ] vulncodedb
We are adding support for formal fix commits tracking in:
We should then collect existing fix commit datasets. Here is a running list:
And the tool https://github.com/SAP/project-kb/tree/main/prospector designed to work with https://github.com/eclipse/steady . We already have an importer in https://github.com/aboutcode-org/vulnerablecode/blob/main/vulnerabilities/importers/kaybee.py for this data, but this needs to be updated for fix commits