jazzsequence / action-wordpress-vulnerability-scanner

A GitHub action that can be used to run vulnerability checks using the 10up WP-CLI Vulnerability Scanner

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Validate against last known version

jazzsequence opened this issue · comments

Since the scanners don't actually run a scan, or compare a current version against known vulnerabilities in a database/API, we should perhaps at least warn (or fail -- with a way to set a failure as resolved) if the last known version of a plugin or theme (or core) has vulnerabilities.