mappedsky/cve-response
Automated CVE triage workflows, run headlessly by the Temporal cve_repo_report workflow from the scheduled query temporal action.
Evaluate newly discovered CVEs against one repository and create or update that repository's CVE findings report.
Compute a CVSS score distribution and severity breakdown for CVEs published in the graph over a configurable lookback window. Uses the sandbox to run Python against graph data for percentile analysis and score statistics.
Establish where an installed package version comes from and what pulls it in, from registry metadata rather than recollection. Use when a vulnerable package is not imported directly and the question is whether it arrives transitively, or when a version pin or compatibility range decides the verdict.
Returns CVEs published within the lookback window by querying the graph (populated from the NVD sync), producing a deduplicated list of CVE IDs sorted by publication date for downstream use by cve_repo_assessment.