Feature request: include CVE-ID as output

Question

Feature request: include CVE-ID as output

chrivand opened this issue 2 years ago · comments

The external_identifier field contains the CVE-ID, which should be quite easy to include in this action. Did I miss it or has this not (yet) been implemented? Thanks!

Jeff Widman · Answer 1 · Sat Apr 08 2023 03:25:31 GMT+0800 (China Standard Time)

We'd happily accept a PR for this!

Timothy · Answer 2 · Fri May 26 2023 07:27:30 GMT+0800 (China Standard Time)

CVE ID is included in the alert-identifiers, with PR 388.

Set output alert-identifiers = [{"type":"GHSA","value":"GHSA-rp65-9cf3-cjxr"},{"type":"CVE","value":"CVE-2021-3803"}]