Is it possible to integrate DT to a new vulnerability service that has an API?

[nigellh]

NVD has become a little out of date in that they are stretched to getting vulnerabilities validated etc.

We were looking to access another, but not one of the ones already defined such as Trivy.

It is an internal one to our company and it has an API and returns the following sort of data via an API call.

At the moment DT has a number of 'hard coded' vulnerability repos such as Trivy, but I was wondering if DT was set up, or could be set up, so that you could create a new vulnerability reporting service.

e.g. the user would have a predefined set of fields that they would need to create for the call and then map the responses back to the 'fields' that DT requires to be able to use it internally.

This could remove the limit of the current hard coded ones. I guess it could then be made to allow this 'framework' to be exported and imported into any other DT instances to use.

I believe to use the API of this system, I need my email address and the API key I have created to call the API.

Is anything like this available or in plan? 🤞

[nigellh]

Closing as raised as an enhancement request - #5031