Amalgamating Code Vulnerabilities Across Projects

A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed by a data processing system.) causes the data pressing system to:

• perform a security vulnerability analysis of first source code of a first application;
• identify, based on results of the security vulnerability analysis, a security vulnerability in a first portion of the first source code;
• associate characteristics of the security vulnerability with the first portion, wherein associating the characteristics of the security vulnerability with the first portion comprises performing, by the data processing system, a lookup operation in a source code repository for an identifier of the first source code that identifies at least one of consumers of the first source code or contributors to the first source code, each source code being mapped to contributor information that created the respective source code or consumer information identifying entities that utilize the respective source code in one or more applications implemented by the consumer;
• correlate the characteristics of the security vulnerability with second source code of a second application based on the association of the characteristics of the security vulnerability with the first portion;
• and
• generate an output to a computing device of a consumer or contributor associated with the second source code identifying a presence of the security vulnerability in the second source code based on the correlation, wherein the output comprises a graphical user interface in which security vulnerabilities in source code across an enterprise depicted based on the bundling of the entries in the security vulnerability cataloging system.

An apparatus comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
• perform a security vulnerability analysis of first source code of a first application;
• identify, based on results of the security vulnerability analysis, a security vulnerability in a first portion of the first source code;
• associate characteristics of the security vulnerability with the first portion, wherein associating the characteristics of the security vulnerability with the first portion comprises performing, by the data processing system, a lookup operation in a source code repository for an identifier of the first source code that identifies at least one of consumers of the first source code or contributors to the first source code, each source cock being mapped to contributor information that created the respective source code or consumer information identifying entities that utilize the respective source code in one or more applications implemented by the consumer;
• correlate the characteristics of the security vulnerability with second source code of a second application based on the association of the characteristics of the security vulnerability with the first portion;
• and
• generate an output to a computing device of a consumer or contributor associated with the second source code identifying a presence of the security vulnerability in the second source code based on the correlation, wherein the output comprises a graphical user interface in which security vulnerabilities in source code across an enterprise are depicted based on the bundling of the entries in the security vulnerability cataloging system.