aveloxis-cve documentationΒΆ

aveloxis-cve is a sidecar for Aveloxis. For a chosen set of repositories, it records which commits are on which branch, so CVE fixes can be traced across release and maintenance branches, and how complexity changed over time in sliding windows.

Document

For

Contents

overview.md

Everyone

Why it exists, the questions it answers, how it works, key concepts, design rules, components

operations.md

Operators

Install, choose repositories, run, recompute, stop, upgrade (migrate), troubleshoot, remove

configuration.md

Operators

Every configuration key, with its default

schema.md

Analysts, developers

The relational model of aveloxis_cve, drawn

data.md

Analysts, developers

Every table, view and column: what a row is, where each value comes from, who writes it, personal data, removal

analysis/

Analysts

The research questions and tested SQL to answer them: CVE fixes, complexity over time, the two together, and data quality

analysis/findings.md

Analysts

What the collected data shows so far, and its open questions

development.md

Developers

Build, test, rules, tripwires, changing the schema, review

The README at the repository root has the command reference. The CHANGELOG has the history of every change.