Currently we only ingest 2 types of version from our threat-intel feed:
- []string{} empty, for all versions
- []string{a, b, c}, for specific versions
but when we support OSV feeds in threat intel, then OSV can have ranges, like Introduced -> Fixed version, while Jfrog do support ranges in version, this is not handled currently, from the Threat Intel level itself.
So this is something to keep an eye on threat intel
If threat intel in future introduced range based versions:
then we can use this for extending the ranges in Jfrog Event.
Currently we only ingest 2 types of version from our threat-intel feed:
but when we support OSV feeds in threat intel, then OSV can have ranges, like Introduced -> Fixed version, while Jfrog do support ranges in version, this is not handled currently, from the Threat Intel level itself.
So this is something to keep an eye on
threat intelIf threat intel in future introduced range based versions:
then we can use this for extending the ranges in Jfrog Event.