fedcode-next: Extract unpublished vulnerabilities from commit histories and trackers #1129

Activity

1. pombredanne

   added

   fix-commit

   on Dec 13, 2024
2. pombredanne

   added a parent issue on Jul 18, 2025

   • fedcode-next: Code pipeline and models to continuously automatically collect fix commits #1721
3. github-project-automation

   added this to 00-AboutCodePlanneron Jul 22, 2025
4. ziadhany

   self-assigned this

   on Aug 30, 2025
5. ziadhany

   moved this to In progress in 00-AboutCodePlanneron Nov 3, 2025
6. pombredanne commented on Feb 12, 2026

   

   pombredanne

   on Feb 12, 2026

   Last edited by pombredanne

   MemberAuthor

   More actions

   We now can parse Git commit messages for vulnerabilities.

   • The main PR is Add support for parsing Git commit messages #1992

   This is an initial script to parse Git commit messages that can be easily integrated with our model. The script takes a Git repository as input, parses all commits, and returns the CVEs along with their corresponding fixed commits.

   We now have a "collect_fix_commits" importer, and we import fix commits from at least these repositories:

   • Add support for parsing Git commit messages #1992 (comment)
7. pombredanne

   closed this as completedon Feb 12, 2026
8. github-project-automation

   moved this from In progress to Done in 00-AboutCodePlanneron Feb 12, 2026
9. pombredanne

   changed the title [-]Extract unpublished vulnerabilities from commit histories and trackers[/-] [+]fedcode-next: Extract unpublished vulnerabilities from commit histories and trackers[/+] on Mar 6, 2026