Hacker GitHub

← All repos

nix-community/vulnix

View on GitHub ↗ ★ 883 Python

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]

7 mentions on Hacker News by 6 people: 1 story, 6 comments · first 2019-05-02 · latest 2022-05-05

Mentions per year 7 mentions · busiest year 2019 (3)
20082026
  1. …if I do need to re-install, it should be mostly a one-liner. For security there are these scanners: https://github.com/flyingcircusio/vulnix https://github.com/andir/nix-vulnerability-scanner I also run all services in docker and my…
  2. …and would maybe raise awareness and provide most visibility to the issues affecting most users. https://github.com/flyingcircusio/vulnix does something like this, but it's currently a third-party tool
  3. Except the auditing doesn't have to be manual: https://github.com/flyingcircusio/vulnix
    comment by bb010g · 2020-05-22 · in What Is Nix?
  4. …to spot malicious code getting introduced there. There's e.g. Vulnix that scans for CVEs [1]. [1] https://github.com/flyingcircusio/vulnix
  5. > [1] https://github.com/flyingcircusio/vulnix Similarly, ‘guix lint’ has a CVE “checker” that reports CVEs that affect a given package [0]. Since the Guix package name might differ from the “CPE name” (the naming scheme devised by NIST),…
    comment by civodul · 2019-05-03 · in GNU Guix 1.0
  6. …and makes things so reproducible is the ultimate tool to avoid many security issues. [1] https://github.com/flyingcircusio/vulnix
    comment by nextos · 2019-05-02 · in GNU Guix 1.0