Skip to content
@openvex

OpenVEX

A simplified Vulnerability Exploitability eXchange implementation

Welcome to OpenVEX!

OpenVEX is an implementation of the Vulnerability Exploitability Exchange (VEX for short) that is designed to be minimal, compliant, interoperable, and embeddable.

OpenVEX is...

A Specification

OpenVEX documents are minimal JSON-LD files that capture the minimal requirements for VEX as defined by the VEX working group organized by CISA. The OpenVEX Specification is owned and steered by the community.

A Go Library

The project has a go library (openvex/go-vex) that lets projects generate, transform and consume OpenVEX files. It enables the ingestion of VEX metadata expressed in other VEX implementations.

A Set of Tools

Work is underway to create the tools software authors and consumers need to handle VEX metadata. The current flagship project is vexctl, a CLI to create, merge and attest VEX documents.

The project has a growing ecosystem with known implementations in:

Pinned Loading

  1. vexctl vexctl Public

    A tool to create, transform and attest VEX metadata

    Go 116 21

  2. go-vex go-vex Public

    Go module to generate and transform VEX documents

    Go 34 15

  3. spec spec Public

    OpenVEX Specification

    129 18

Repositories

Showing 9 of 9 repositories
  • discovery Public

    OpenVEX discovery module

    openvex/discovery’s past year of commit activity
    Go 0 Apache-2.0 4 0 1 Updated Oct 28, 2024
  • vexctl Public

    A tool to create, transform and attest VEX metadata

    openvex/vexctl’s past year of commit activity
    Go 116 Apache-2.0 21 10 (1 issue needs help) 0 Updated Oct 25, 2024
  • go-vex Public

    Go module to generate and transform VEX documents

    openvex/go-vex’s past year of commit activity
    Go 34 Apache-2.0 15 2 1 Updated Oct 25, 2024
  • setup-vexctl Public

    VEXctl GitHub Action

    openvex/setup-vexctl’s past year of commit activity
    0 Apache-2.0 1 0 0 Updated Oct 24, 2024
  • spec Public

    OpenVEX Specification

    openvex/spec’s past year of commit activity
  • generate-vex Public

    OpenVEX GitHub action that generates VEX data

    openvex/generate-vex’s past year of commit activity
    1 Apache-2.0 1 1 1 Updated Dec 15, 2023
  • examples Public

    Open VEX examples and learning materials

    openvex/examples’s past year of commit activity
    Go 3 Apache-2.0 3 0 0 Updated Oct 11, 2023
  • community Public

    OpenVEX project community documentation

    openvex/community’s past year of commit activity
    7 CC0-1.0 4 0 1 Updated Aug 9, 2023
  • .github Public
    openvex/.github’s past year of commit activity
    0 1 0 0 Updated May 5, 2023

Top languages

Loading…

Most used topics