Prioritise vulnerabilities
Version 1.7 of BOMnipotent brings a severity filter and improved CSAF matching.
To analyse and fix all vulnerabilities reported for a product is a noble goal, but not always a realistic one. Some ecosystems involve so many dependencies with so many small issues, that the resources for a complete audit would not be a good investement.
Instead, a subset of scrutinised issues has to be selected. To assist with this, BOMnipotent offers the “min-severity” filter for the “vulnerability” command, beginning with version 1.7. It displays only the vulnerabilites that have at least a certain severity or score.
In a completely sepatare development, the matching algorithm between BOM and CSAF documents has been improved.
The full changelog can, as always, be found in the documentation.
