Problem with reachabilty score

[Szamos96]

The versions in advisory records are extracted from the description, not optimal to use as an exact git tag.

[copernico]

Can you elaborate? What is the problem? We have a function to map versions to tags, if that's what you need.
See here: https://github.com/SAP/project-kb/blob/prospector-assuremoss/prospector/git/version_to_tag.py#L54
the function def get_tag_for_version(tags, version)

Here you can see how it is used in practice:
https://github.com/SAP/project-kb/blob/prospector-assuremoss/prospector/client/cli/prospector_client.py#L92

# note: you have to provide the_version
repository = Git(repository_url, git_cache)
repository.clone()
tags = repository.get_tags()
the_tag = get_tag_for_version(tags, the_version)[0]