This repository (repo) is a part of the Global Security Database (GSD), an open source project by the Cloud Security Alliance (CSA) to address gaps within the current vulnerability identifier space.
If you are unfamiliar with the GSD and the vulnerability identifier space, please read: gsd.id/about
If you're looking to contribute or file a bug, please see: gsd.id/getting-started
The gsd-tools repo contains any tools, parsers, applications, and other code related to the GSD, it also contains documents, strategy, analysis and other data related to the GSD project. The data for the identifiers themselves live within the gsd-database repo.
Please note that the data for GSD is CC0, everything else is Apache v2.0. See the LICENSE.md file for each project for more details.
Each project has its own README and supporting documents. Included below is a short one line description of each project and a quick link to its more detailed README.
- GSD Analysis - A review of the GSD data using a python parser
- GSD API - REST API for interfacing with the GSD Database - https://api.gsd.id
- GSD Bot - Automation around specifically formatted issues within the gsd-database repo
- GSD GitHub Actions - GSD Github Actions
- GSD Requests - Webform for submitting new GSD IDs
- GSD Schema - JSON schema of a GSD identifier
- GSD URL Processing
- GSD Web - A web based user interface for the GSD data - https://data.gsd.id
- Local Scripts
- Website - https://gsd.id