cravex2-reachability: Create a design/evaluation doc for rules engines and policy engines

[pombredanne]

We need a design and and evaluation document for the necessary features with the results of testing rules engines and policy engines. It should describe the features we need for these. It also means we want to evaluate rules tools triaging vulnerabilities

[TG1999]

I am working on suggesting the kind of rules we can have on the basis of our existing data in VCIO.

[pombredanne]

@TG1999 do you have a doc with some results of your eval?

[TG1999]

aboutcode-org/www.aboutcode.org#176 Design decision is ready for review here

[TG1999]

Doc for evaluation in review here https://github.com/aboutcode-org/aboutcode/pull/308/changes

[TG1999]

This is done now

Reference:

• Add vuln triaging architecture decision aboutcode#308
• https://github.com/aboutcode-org/dejacode/tree/rules_vuln_triage_poc

We have an architecture decision where we have weighed and evaluated many options, Also we have a POC banch where we experiemented these options