VulnerableCode

VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current.

It is made by the FOSS community to improve and secure the open source software ecosystem.

Getting started

Run with Docker

git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make envfile
docker-compose build
docker-compose up
docker-compose run vulnerablecode ./manage.py import --list

At this point, the VulnerableCode app should be running at port 8000 on your Docker host.

Local development installation

sudo apt-get install \
    python3-venv python3-dev postgresql libpq-dev build-essential
git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make dev envfile postgres
make test
make run

At this point, the VulnerableCode app should be running at port 8000 on your machine.

Populate VulnerableCode data

To run all importers and improvers use:

./manage.py import --all
./manage.py improve --all

Read more about VulnerableCode here: https://vulnerablecode.readthedocs.org/