license switch agpl -> busl1, sprints work, new product advisories
This commit is contained in:
@@ -41,7 +41,7 @@ In-depth design detail lives in `../../modules/scanner/design/windows-analyzer.m
|
||||
## Open design questions
|
||||
| Topic | Question | Owner |
|
||||
| --- | --- | --- |
|
||||
| MSI parsing library | Build custom reader or embed open-source MSI parser? Must be AGPL-compatible and offline-ready. | Scanner Guild |
|
||||
| MSI parsing library | Build custom reader or embed open-source MSI parser? Must be BUSL-1.1-compatible and offline-ready. | Scanner Guild |
|
||||
| Driver risk classification | Should Policy Engine treat kernel-mode drivers differently by default? | Policy Guild |
|
||||
| Authenticodes & catalogs | Where do we verify signature/certificate revocation (scanner vs policy)? | Security Guild |
|
||||
| Registry access | Will scanner access registry hives directly or require pre-extracted exports? | Scanner + Ops Guild |
|
||||
|
||||
Reference in New Issue
Block a user