pepelyaevip/vuln-list-update
1
0
Fork 0
Code Pull Requests Actions Packages Releases Activity
201 Commits 1 Branch 0 Tags 6.2 MiB
5c22217349
Commit Graph

201 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Teppei Fukuda
cccad02d55
fix(debian): handle severity properly (#109) 
* test(debian): add a failure case

* fix(debian): handle severity
 2021-09-28 09:48:35 +03:00
Teppei Fukuda
127afe7c71
feat(alpine-unfixed): add cpe (#106) 2021-09-16 22:18:29 +03:00
Teppei Fukuda
7d2eb302d1
feat(debian): replace JSON API with salsa repo (#95) 2021-09-15 22:49:22 +03:00
Naimuddin Shaik
3104324321
feat(alpine): add support of unfixed vulnerabilities (#93) 
Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2021-09-12 20:30:20 +03:00
Teppei Fukuda
d212042d1b
feat(download): add downloader (#105) 2021-09-11 18:51:34 +03:00
MaineK00n
e081c6e763
feat(alma): support AlmaLinux (#98) 
* feat(alma): support AlmaLinux Errata

* style(alma): change var name

* fix(alma): fix test case

* chore: fix typo

* chore: use pb/v3

* chore: change by review

* style: rename var

* fix(alma): change location of the module field

* feat(alma): more detailed by year

* refactor(alma): do not loop twice

* refactor(alma): use IssuedDate

* refactor(alma): remove magic number

* refactor(alma): use time.UnixMilli
 2021-09-03 01:02:09 +03:00
Teppei Fukuda
b646ca8fb9
chore(ci): bump up Go to 1.17 (#100) 2021-09-03 00:53:56 +03:00
patryk4815
378edf0454
Add golang support in ghsa source (#99) 
Add golang support in ghsa source
 2021-09-02 19:06:08 +03:00
Teppei Fukuda
efb2c4325b
feat(debian/oval): add bullseye (#97) 2021-09-01 13:04:46 +03:00
Teppei Fukuda
2a67b66eff
chore(cron): fix a broken yaml (#91) 2021-06-15 15:49:37 +03:00
santhosh1729
96e4364d1b
Arch linux folder name change (#90) 2021-06-15 15:43:31 +03:00
santhosh1729
71d82581c9
feat: add Arch Linux Tracker (#88) 
* Arch Linux Tracker to collect vulnerabilities

* refactor(arch)

* chore: go mod tidy

Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2021-06-06 19:14:28 +03:00
rahul2393
6926908ba2
Skip empty oval file (#89) 2021-05-27 17:10:38 +03:00
Masahiro331
668f12a150
chore(ci): add GitLab Advisory Database (#85) 2021-04-28 03:47:05 +03:00
Teppei Fukuda
357afc54d8
feat: support GitLab Advisory Database (#73) 
* initial commit

* chore(mod): update

* test(gemnasium): add tests

* feat(main): add target

* change(GitLab Advisories Database) gemnasium to advisories community

* fix(GitLab Advisory Database) Identifer to upper case

* test(GitLab Advisory Database) add lower case identifer test

* fix(GitLab Advisory Database) no newline at end of file

* fix(GitLab Advisory Database) fix test use JSONEq

* fix(GitLab Advisory Database) fix clone community advisory branch name

* change(git) CloneOrPull use default branch

* refactor(glad)

Co-authored-by: masahiro331 <mur4m4s4.331@gmail.com>
 2021-04-27 13:59:59 +03:00
rahul2393
a62fe1fcc1
Refactored based on operating system (#81) 2021-04-23 11:21:27 +03:00
aprp
e75006e8cd
ubuntu: remove dir if clone/pull fails halfway (#79) 
* ubuntu: remove dir if clone/pull fails halfway

* ubuntu: remove dir if clone/pull fails halfway (nit)

https://github.com/aquasecurity/vuln-list-update/pull/79#discussion_r592879762
 2021-03-15 06:30:12 +02:00
aprp
dae5f0ef64
ubuntu: remove vuln-dir before update (#78) 
* add ignored to ubuntu target

* add ubuntu repo url

* remove vuln-list dir before update

* scope error handling
 2021-03-11 10:23:41 +02:00
aprp
1e28a8e150
fix(photon): skip empty CVE-IDs (#75) 
* photon: display warning on invalid CVE-ID

* photon: CVE-ID: ignore on empty, error on invalid

* photon: update test cases

* photon: separate tests for empty and invalid CVE-ID
 2021-03-10 12:40:38 +02:00
Teppei Fukuda
03e56c5a5d
chore(ci): update advisories every 6 hours (#74) 2021-03-10 08:55:31 +02:00
Teppei Fukuda
706ce31e67
chore(actions): add 2021 for Red Hat Security Data API (#72) 2021-01-20 09:08:54 +02:00
Teppei Fukuda
36b46f6775
feat(redhat): add all OVAL files (#71) 2021-01-17 17:06:09 +02:00
Carol Valencia
08bab60ece
chore: update Apache icon in Readme (#64) 
Co-authored-by: Carol Valencia <krol3@users.noreply.github.com>
 2021-01-17 10:19:57 +02:00
Teppei Fukuda
cfec30da40
chore(actions): run steps always (#70) 2021-01-17 06:32:27 +02:00
Teppei Fukuda
4d89e3c744
feat: clean repository at the end (#69) 
* feat: add debug flag

* refactor(git): remove unnecessary methods

* feat: git reset and clean

* refactor: fix a lint issue
 2021-01-17 06:31:52 +02:00
Teppei Fukuda
8f3abd6a6c
feat(alpine): migrate to a new secdb (#68) 
* refactor: replace a method to a function

* feat(alpine): migrate to a new secdb

* lint fix

* feat(alpine): split files
 2021-01-11 17:08:29 +02:00
Teppei Fukuda
5206d8df5c
refactor: replace a method to a function (#67) 2021-01-04 14:44:37 +02:00
Masahiro331
6637c53214
Update update.yml (#66) 
add workflow_dispatch
 2020-12-31 23:38:27 +09:00
Masahiro331
9cdf1c8d60
Support Red Hat OVAL v2 (#65) 
* [WIP] ovalv2

* Add redhat ovalv2

* delete debug struct

* referctoring json file

* refactor error message

* refactor test comment

* change command target

* update workflows

* fix xml

* add omitempty

* update test data

* add remove dicectory option

* fix error message

* change redhat2 oval workflow

* delete  -remove-redhat-ovalv2 flag

* update test code

* feat(main): add VULN_LIST_ENV for debugging

* feat(oval/redhat2): add RHEL5 from OVALv1

* test(redhat2): add RHEL5

* update bagzilla

* update test

* Revert "test(redhat2): add RHEL5"

This reverts commit 226645438212fcaf0b5ed3428c40aa3b06e37e22.

* Revert "feat(oval/redhat2): add RHEL5 from OVALv1"

This reverts commit c8bad1c051020eb0fa67f6e355208f549a136106.

* fix(main): early return

* refactor(main): fix log messages

* refactor(redhat2)

* fix(redhat2): use ID

* refactor

* refactor(redhat): replace redhat with redhat2

Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2020-12-31 15:38:53 +02:00
Teppei Fukuda
38a3516f0a
fix: migrate from master to main (#63) 2020-12-17 17:05:35 +02:00
Teppei Fukuda
3747382c12
fix(photon): migrate the repository (#62) 
* chore: skip Photon security advisories temporarily

* fix(photon): migrate the repository

* Revert "chore: skip Photon security advisories temporarily"

This reverts commit edcfbd5f9c783e7d2648b5cf3dcace8bc27e58d7.
 2020-12-14 08:54:46 +02:00
Teppei Fukuda
b6ebf0551c
chore(actions): deprecate set-env (#60) 2020-11-19 13:09:28 +02:00
Teppei Fukuda
ade2d21f6e
fix(cvrf/suse): handle invalid UTF-8 characters (#58) 
* fix(cvrf/suse): handle invalid UTF-8 characters

* refactor(cvrf/suse): inline

Co-authored-by: Simarpreet Singh <simar@linux.com>

Co-authored-by: Simarpreet Singh <simar@linux.com>
 2020-11-04 15:51:14 +02:00
Neha Viswanathan
1fec39744a
remove travis info (#55) 2020-10-15 10:44:55 +03:00
Sudipto Ghosh
05b52e2e89
feat: utilise golangci-lint-action in workflow (#52) 2020-10-14 17:36:42 +03:00
Neha Viswanathan
17ee611c15
update CI with latest versions of go and golangci-lint (#50) 2020-10-14 11:10:10 +03:00
rahul2393
38108d7f2d
Updated logic to parse patches in ubuntu CVE file (#44) 
* Updated logic to parse patches in ubuntu CVE file

* test(ubuntu): add the test case

* test(ubuntu): add a new case causing a problem

* test(ubuntu): pending case

* test(ubuntu): multiple upstreams

* fix(ubuntu): handle corner cases

Co-authored-by: knqyf263 <knqyf263@gmail.com>
 2020-08-17 14:51:04 +03:00
Simarpreet Singh
0692711618
cwe: Add a commit message to updates (#43) 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 2020-08-06 10:22:55 +03:00
Simarpreet Singh
319f079602
cwe: Add initial logic to download and save CWE files (#40) 
* cwe: Add initial logic to download and save CWE files

Signed-off-by: Simarpreet Singh <simar@linux.com>

* cwe: Add logic to parse and save XML data as file

Signed-off-by: Simarpreet Singh <simar@linux.com>

* cwe: Dont save XML file as output

Signed-off-by: Simarpreet Singh <simar@linux.com>

* cwe: Save each CWE-ID as a JSON document

Signed-off-by: Simarpreet Singh <simar@linux.com>

* cwe: Address nits

Signed-off-by: Simarpreet Singh <simar@linux.com>
 2020-08-04 14:01:18 -07:00
rahul2393
aea7ab0073
Update to use github cron workflow (#38) 2020-07-14 08:46:22 +03:00
rahul2393
6087c10f73
Removed travis file and added github workflow (#37) 
* Removed travis file and added github workflow

* Updated action name
 2020-07-13 20:20:47 +03:00
Teppei Fukuda
ed1ba45061
fix(alpine): replace go-version with go-apk-version (#34) 
* test(alpine): add a failing test

* fix(alpine): replace go-version with go-apk-version
 2020-06-29 20:55:16 +03:00
Teppei Fukuda
95bdc43aeb
fix(alpine): handle security fixes (#35) 
* test(alpine): add a failing test

* fix(alpine): handle security fixes
 2020-06-29 20:54:35 +03:00
Simarpreet Singh
478299d366 nvd: bump to use 1.1 schema for baseMetricsV3 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 2020-05-06 09:45:29 -07:00
Teppei Fukuda
e308afb79a
fix(git): fetch all branches (#32) 2020-04-06 12:57:24 +03:00
Liz Rice
9ad10fa73b
Merge pull request #31 from aquasecurity/license 
Change license to Apache 2.0
 2020-03-13 09:50:12 +00:00
Liz Rice
af559da030 Change license to Apache 2.0 2020-03-13 09:29:26 +00:00
Masahiro Fujimura
11f2a4cbee
Add GitHub Security Advisory Database (#29) 
* Add GitHub Security Advisory

* Update go.mod

* Fix main.go

* Exec go mod tidy

* Change travis ci

* Fix Bugs...

* Add remobe directory

* Update review

* ghsa: Remove package level state

Signed-off-by: Simarpreet Singh <simar@linux.com>

* Add retry test

* test(ghsa): remove unneeded testdata

* refactor(ghsa): rename VersionAdvisories to Versions

* refactor(ghsa): unexport members

* refactor(ghsa): fix warnings

* refactor(ghsa): replace githubql with githubv4

* refactor(ghsa): update log messages

* refactor(ghsa): update error messages

* refactor(ghsa): unexport a function

* refactor(ghsa): make it  possible to replace wait function

* Fix empty line

Co-authored-by: Simarpreet Singh <simar@linux.com>
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
 2020-02-28 08:15:34 +02:00
Teppei Fukuda
0fcaa3e3d3
fix(amazon): handle removed ALAS (#28) 
* test(amazon): add a file to be removed

* fix(amazon): remove the entire dir once before updating ALAS
 2020-01-29 22:05:10 +02:00
Masahiro Fujimura
a128f2f876 Ignore dev version (#27) 
* Ignore dev version

* Review commit
 2020-01-25 09:10:37 +02:00