internal/{frontend,vuln}: display affected modules

For vulns with no detailed package data, display affected
modules and versions.

Change-Id: Ibacdcd486cbb47b17a11d331692356a0603ac6d1
Reviewed-on: https://go-review.googlesource.com/c/pkgsite/+/581181
kokoro-CI: kokoro <noreply+kokoro@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
This commit is contained in:
Tatiana Bradley 2024-04-23 21:13:32 +00:00
Родитель a3b6cd3042
Коммит 41da83f650
9 изменённых файлов: 112 добавлений и 63 удалений

Просмотреть файл

@ -35,10 +35,11 @@ type VulnListPage struct {
// vuln entry. // vuln entry.
type VulnEntryPage struct { type VulnEntryPage struct {
page.BasePage page.BasePage
Entry *osv.Entry Entry *osv.Entry
AffectedPackages []*vuln.AffectedPackage AffectedPackages []*vuln.AffectedComponent
AliasLinks []link ModulesWithNoPackages []*vuln.AffectedComponent
AdvisoryLinks []link AliasLinks []link
AdvisoryLinks []link
} }
func (s *Server) serveVuln(w http.ResponseWriter, r *http.Request, _ internal.DataSource) error { func (s *Server) serveVuln(w http.ResponseWriter, r *http.Request, _ internal.DataSource) error {
@ -120,11 +121,13 @@ func newVulnEntryPage(ctx context.Context, client *vuln.Client, id string) (*Vul
if entry == nil { if entry == nil {
return nil, derrors.NotFound return nil, derrors.NotFound
} }
pkgs, mods := vuln.AffectedComponents(entry)
return &VulnEntryPage{ return &VulnEntryPage{
Entry: entry, Entry: entry,
AffectedPackages: vuln.AffectedPackages(entry), AffectedPackages: pkgs,
AliasLinks: aliasLinks(entry), ModulesWithNoPackages: mods,
AdvisoryLinks: advisoryLinks(entry), AliasLinks: aliasLinks(entry),
AdvisoryLinks: advisoryLinks(entry),
}, nil }, nil
} }

Просмотреть файл

@ -74,11 +74,11 @@ func toVulns(entries []*osv.Entry) []Vuln {
return vulns return vulns
} }
// AffectedPackage holds information about a package affected by a certain vulnerability. // AffectedComponent holds information about a module/package affected by a certain vulnerability.
type AffectedPackage struct { type AffectedComponent struct {
PackagePath string Path string
Versions string Versions string
// Lists of affected symbols. // Lists of affected symbols (for packages).
// If both of these lists are empty, all symbols in the package are affected. // If both of these lists are empty, all symbols in the package are affected.
ExportedSymbols []string ExportedSymbols []string
UnexportedSymbols []string UnexportedSymbols []string
@ -131,9 +131,8 @@ func collectRangePairs(a osv.Affected) []pair {
return ps return ps
} }
// AffectedPackages extracts information about affected packages from the given osv.Entry. // AffectedComponents extracts information about affected packages (and // modules, if there are any with no package information) from the given osv.Entry.
func AffectedPackages(e *osv.Entry) []*AffectedPackage { func AffectedComponents(e *osv.Entry) (pkgs, modsNoPkgs []*AffectedComponent) {
var affs []*AffectedPackage
for _, a := range e.Affected { for _, a := range e.Affected {
pairs := collectRangePairs(a) pairs := collectRangePairs(a)
var vs []string var vs []string
@ -152,10 +151,16 @@ func AffectedPackages(e *osv.Entry) []*AffectedPackage {
} }
vs = append(vs, s) vs = append(vs, s)
} }
if len(a.EcosystemSpecific.Packages) == 0 {
modsNoPkgs = append(modsNoPkgs, &AffectedComponent{
Path: a.Module.Path,
Versions: strings.Join(vs, ", "),
})
}
for _, p := range a.EcosystemSpecific.Packages { for _, p := range a.EcosystemSpecific.Packages {
exported, unexported := affectedSymbols(p.Symbols) exported, unexported := affectedSymbols(p.Symbols)
affs = append(affs, &AffectedPackage{ pkgs = append(pkgs, &AffectedComponent{
PackagePath: p.Path, Path: p.Path,
Versions: strings.Join(vs, ", "), Versions: strings.Join(vs, ", "),
ExportedSymbols: exported, ExportedSymbols: exported,
UnexportedSymbols: unexported, UnexportedSymbols: unexported,
@ -163,7 +168,7 @@ func AffectedPackages(e *osv.Entry) []*AffectedPackage {
}) })
} }
} }
return affs return pkgs, modsNoPkgs
} }
func affectedSymbols(in []string) (e, u []string) { func affectedSymbols(in []string) (e, u []string) {

Просмотреть файл

@ -186,7 +186,7 @@ func TestCollectRangePairs(t *testing.T) {
} }
func TestAffectedPackages_Versions(t *testing.T) { func TestAffectedComponents_Versions(t *testing.T) {
for _, test := range []struct { for _, test := range []struct {
name string name string
in []osv.RangeEvent in []osv.RangeEvent
@ -231,7 +231,7 @@ func TestAffectedPackages_Versions(t *testing.T) {
}}, }},
}}, }},
} }
out := AffectedPackages(entry) out, _ := AffectedComponents(entry)
got := out[0].Versions got := out[0].Versions
if got != test.want { if got != test.want {
t.Errorf("got %q, want %q\n", got, test.want) t.Errorf("got %q, want %q\n", got, test.want)
@ -240,11 +240,12 @@ func TestAffectedPackages_Versions(t *testing.T) {
} }
} }
func TestAffectedPackagesPackagesSymbols(t *testing.T) { func TestAffectedComponents(t *testing.T) {
tests := []struct { tests := []struct {
name string name string
in *osv.Entry in *osv.Entry
want []*AffectedPackage wantPkgs []*AffectedComponent
wantMods []*AffectedComponent
}{ }{
{ {
name: "one symbol", name: "one symbol",
@ -260,10 +261,11 @@ func TestAffectedPackagesPackagesSymbols(t *testing.T) {
}, },
}}, }},
}, },
want: []*AffectedPackage{{ wantPkgs: []*AffectedComponent{{
PackagePath: "example.com/mod/pkg", Path: "example.com/mod/pkg",
ExportedSymbols: []string{"F"}, ExportedSymbols: []string{"F"},
}}, }},
wantMods: nil,
}, },
{ {
name: "multiple symbols", name: "multiple symbols",
@ -279,11 +281,12 @@ func TestAffectedPackagesPackagesSymbols(t *testing.T) {
}, },
}}, }},
}, },
want: []*AffectedPackage{{ wantPkgs: []*AffectedComponent{{
PackagePath: "example.com/mod/pkg", Path: "example.com/mod/pkg",
ExportedSymbols: []string{"F", "S.F"}, ExportedSymbols: []string{"F", "S.F"},
UnexportedSymbols: []string{"g", "S.f", "s.F", "s.f"}, UnexportedSymbols: []string{"g", "S.f", "s.F", "s.f"},
}}, }},
wantMods: nil,
}, },
{ {
name: "no symbol", name: "no symbol",
@ -298,51 +301,68 @@ func TestAffectedPackagesPackagesSymbols(t *testing.T) {
}, },
}}, }},
}, },
want: []*AffectedPackage{{ wantPkgs: []*AffectedComponent{{
PackagePath: "example.com/mod/pkg", Path: "example.com/mod/pkg",
}}, }},
wantMods: nil,
}, },
{ {
name: "multiple pkgs and modules", name: "multiple pkgs and modules",
in: &osv.Entry{ in: &osv.Entry{
ID: "GO-2022-0004", ID: "GO-2022-0004",
Affected: []osv.Affected{{ Affected: []osv.Affected{
Module: osv.Module{Path: "example.com/mod1"}, {
EcosystemSpecific: osv.EcosystemSpecific{ Module: osv.Module{Path: "example.com/mod"},
Packages: []osv.Package{{ Ranges: []osv.Range{{
Path: "example.com/mod1/pkg1", Type: osv.RangeTypeSemver,
}, { Events: []osv.RangeEvent{{Fixed: "1.5"}},
Path: "example.com/mod1/pkg2",
Symbols: []string{"F"},
}}, }},
// no packages
}, },
}, { {
Module: osv.Module{Path: "example.com/mod2"}, Module: osv.Module{Path: "example.com/mod1"},
EcosystemSpecific: osv.EcosystemSpecific{ EcosystemSpecific: osv.EcosystemSpecific{
Packages: []osv.Package{{ Packages: []osv.Package{{
Path: "example.com/mod2/pkg3", Path: "example.com/mod1/pkg1",
Symbols: []string{"g", "H"}, }, {
}}, Path: "example.com/mod1/pkg2",
}, Symbols: []string{"F"},
}}, }},
},
}, {
Module: osv.Module{Path: "example.com/mod2"},
EcosystemSpecific: osv.EcosystemSpecific{
Packages: []osv.Package{{
Path: "example.com/mod2/pkg3",
Symbols: []string{"g", "H"},
}},
},
}},
}, },
want: []*AffectedPackage{{ wantPkgs: []*AffectedComponent{{
PackagePath: "example.com/mod1/pkg1", Path: "example.com/mod1/pkg1",
}, { }, {
PackagePath: "example.com/mod1/pkg2", Path: "example.com/mod1/pkg2",
ExportedSymbols: []string{"F"}, ExportedSymbols: []string{"F"},
}, { }, {
PackagePath: "example.com/mod2/pkg3", Path: "example.com/mod2/pkg3",
ExportedSymbols: []string{"H"}, ExportedSymbols: []string{"H"},
UnexportedSymbols: []string{"g"}, UnexportedSymbols: []string{"g"},
}}, }},
wantMods: []*AffectedComponent{{
Path: "example.com/mod",
Versions: "before v1.5",
}},
}, },
} }
for _, tt := range tests { for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) { t.Run(tt.name, func(t *testing.T) {
got := AffectedPackages(tt.in) gotPkgs, gotMods := AffectedComponents(tt.in)
if diff := cmp.Diff(tt.want, got, cmpopts.IgnoreUnexported(AffectedPackage{})); diff != "" { if diff := cmp.Diff(tt.wantPkgs, gotPkgs, cmpopts.IgnoreUnexported(AffectedComponent{})); diff != "" {
t.Errorf("mismatch (-want, +got):\n%s", diff) t.Errorf("pkgs mismatch (-want, +got):\n%s", diff)
}
if diff := cmp.Diff(tt.wantMods, gotMods, cmpopts.IgnoreUnexported(AffectedComponent{})); diff != "" {
t.Errorf("mods mismatch (-want, +got):\n%s", diff)
} }
}) })
} }

Просмотреть файл

@ -81,6 +81,10 @@
padding: 0.5rem; padding: 0.5rem;
} }
.VulnEntryModules {
grid-template-columns: minmax(10em, 50%) 1fr;
}
/* Header */ /* Header */
.VulnEntryPackages-item-container:first-child { .VulnEntryPackages-item-container:first-child {
background-color: var(--color-background-accented); background-color: var(--color-background-accented);

2
static/frontend/vuln/entry/entry.min.css поставляемый
Просмотреть файл

@ -3,5 +3,5 @@
* Use of this source code is governed by a BSD-style * Use of this source code is governed by a BSD-style
* license that can be found in the LICENSE file. * license that can be found in the LICENSE file.
*/ */
.Vuln-alias{display:none}.VulnEntry{display:flex;flex-direction:column;gap:1rem;margin-top:.5rem}.VulnEntry h2{font-size:1.25rem}.VulnEntryPackages-detailsContent{margin-left:.2rem}.VulnEntryPackages-container{display:grid;grid-gap:.5rem;grid-template-columns:1fr}.VulnEntryPackages-container>li:first-child{display:none}.VulnEntryPackages-attr:before{color:var(--color-text-subtle);content:attr(data-name)}.VulnEntryPackages-attr{display:grid;grid-template-columns:minmax(5em,10%) 1fr;list-style:disc;list-style-position:inside;overflow-wrap:anywhere;padding:.2rem}@media screen and (min-width: 46rem){.VulnEntryPackages-container{grid-gap:0}.VulnEntryPackages-item{padding:inherit}.VulnEntryPackages-container>li:first-child{display:grid}.VulnEntryPackages-attr:before{content:none}.VulnEntryPackages-attr{grid-template-columns:1fr}.VulnEntryPackages-item-container{display:grid;grid-template-columns:minmax(10em,50%) minmax(5em,20%) 1fr;padding:.5rem}.VulnEntryPackages-item-container:first-child{background-color:var(--color-background-accented)}.VulnEntryPackages-item-container:first-child .VulnEntryPackages-attr{display:flex;font-weight:700;overflow:auto;text-overflow:initial;white-space:normal}}.VulnEntry-referenceList,.VulnEntry-aliases{line-height:1.75rem;word-break:break-all} .Vuln-alias{display:none}.VulnEntry{display:flex;flex-direction:column;gap:1rem;margin-top:.5rem}.VulnEntry h2{font-size:1.25rem}.VulnEntryPackages-detailsContent{margin-left:.2rem}.VulnEntryPackages-container{display:grid;grid-gap:.5rem;grid-template-columns:1fr}.VulnEntryPackages-container>li:first-child{display:none}.VulnEntryPackages-attr:before{color:var(--color-text-subtle);content:attr(data-name)}.VulnEntryPackages-attr{display:grid;grid-template-columns:minmax(5em,10%) 1fr;list-style:disc;list-style-position:inside;overflow-wrap:anywhere;padding:.2rem}@media screen and (min-width: 46rem){.VulnEntryPackages-container{grid-gap:0}.VulnEntryPackages-item{padding:inherit}.VulnEntryPackages-container>li:first-child{display:grid}.VulnEntryPackages-attr:before{content:none}.VulnEntryPackages-attr{grid-template-columns:1fr}.VulnEntryPackages-item-container{display:grid;grid-template-columns:minmax(10em,50%) minmax(5em,20%) 1fr;padding:.5rem}.VulnEntryModules{grid-template-columns:minmax(10em,50%) 1fr}.VulnEntryPackages-item-container:first-child{background-color:var(--color-background-accented)}.VulnEntryPackages-item-container:first-child .VulnEntryPackages-attr{display:flex;font-weight:700;overflow:auto;text-overflow:initial;white-space:normal}}.VulnEntry-referenceList,.VulnEntry-aliases{line-height:1.75rem;word-break:break-all}
/*# sourceMappingURL=entry.min.css.map */ /*# sourceMappingURL=entry.min.css.map */

Просмотреть файл

@ -1,7 +1,7 @@
{ {
"version": 3, "version": 3,
"sources": ["entry.css"], "sources": ["entry.css"],
"sourcesContent": ["/*\n * Copyright 2021 The Go Authors. All rights reserved.\n * Use of this source code is governed by a BSD-style\n * license that can be found in the LICENSE file.\n */\n\n.Vuln-alias {\n display: none;\n}\n\n.VulnEntry {\n display: flex;\n flex-direction: column;\n gap: 1rem;\n margin-top: 0.5rem;\n}\n\n.VulnEntry h2 {\n font-size: 1.25rem;\n}\n\n.VulnEntryPackages-detailsContent {\n margin-left: 0.2rem;\n}\n\n/* One column by default */\n.VulnEntryPackages-container {\n display: grid;\n grid-gap: 0.5rem;\n grid-template-columns: 1fr;\n}\n\n/* Don't display the first item - the headers for multi-col layout */\n.VulnEntryPackages-container > li:first-child {\n display: none;\n}\n\n.VulnEntryPackages-attr::before {\n color: var(--color-text-subtle);\n content: attr(data-name);\n}\n\n/* Attribute name for first column, and attribute value for second column. */\n.VulnEntryPackages-attr {\n display: grid;\n grid-template-columns: minmax(5em, 10%) 1fr;\n list-style: disc;\n list-style-position: inside;\n\n /* package and symbol names can be pretty long */\n overflow-wrap: anywhere;\n padding: 0.2rem;\n}\n\n/* Three columns for wider screen */\n@media screen and (min-width: 46rem) {\n /* Undo what's done by default */\n .VulnEntryPackages-container {\n grid-gap: 0;\n }\n\n .VulnEntryPackages-item {\n padding: inherit;\n }\n\n .VulnEntryPackages-container > li:first-child {\n display: grid; /* undo display: none setfor default */\n }\n\n .VulnEntryPackages-attr::before {\n content: none;\n }\n\n .VulnEntryPackages-attr {\n grid-template-columns: 1fr;\n }\n\n .VulnEntryPackages-item-container {\n display: grid;\n grid-template-columns: minmax(10em, 50%) minmax(5em, 20%) 1fr;\n padding: 0.5rem;\n }\n\n /* Header */\n .VulnEntryPackages-item-container:first-child {\n background-color: var(--color-background-accented);\n }\n\n /* Header text */\n .VulnEntryPackages-item-container:first-child .VulnEntryPackages-attr {\n display: flex;\n font-weight: bold;\n overflow: auto;\n text-overflow: initial;\n white-space: normal;\n }\n}\n\n.VulnEntry-referenceList,\n.VulnEntry-aliases {\n line-height: 1.75rem;\n word-break: break-all;\n}\n"], "sourcesContent": ["/*\n * Copyright 2021 The Go Authors. All rights reserved.\n * Use of this source code is governed by a BSD-style\n * license that can be found in the LICENSE file.\n */\n\n.Vuln-alias {\n display: none;\n}\n\n.VulnEntry {\n display: flex;\n flex-direction: column;\n gap: 1rem;\n margin-top: 0.5rem;\n}\n\n.VulnEntry h2 {\n font-size: 1.25rem;\n}\n\n.VulnEntryPackages-detailsContent {\n margin-left: 0.2rem;\n}\n\n/* One column by default */\n.VulnEntryPackages-container {\n display: grid;\n grid-gap: 0.5rem;\n grid-template-columns: 1fr;\n}\n\n/* Don't display the first item - the headers for multi-col layout */\n.VulnEntryPackages-container > li:first-child {\n display: none;\n}\n\n.VulnEntryPackages-attr::before {\n color: var(--color-text-subtle);\n content: attr(data-name);\n}\n\n/* Attribute name for first column, and attribute value for second column. */\n.VulnEntryPackages-attr {\n display: grid;\n grid-template-columns: minmax(5em, 10%) 1fr;\n list-style: disc;\n list-style-position: inside;\n\n /* package and symbol names can be pretty long */\n overflow-wrap: anywhere;\n padding: 0.2rem;\n}\n\n/* Three columns for wider screen */\n@media screen and (min-width: 46rem) {\n /* Undo what's done by default */\n .VulnEntryPackages-container {\n grid-gap: 0;\n }\n\n .VulnEntryPackages-item {\n padding: inherit;\n }\n\n .VulnEntryPackages-container > li:first-child {\n display: grid; /* undo display: none setfor default */\n }\n\n .VulnEntryPackages-attr::before {\n content: none;\n }\n\n .VulnEntryPackages-attr {\n grid-template-columns: 1fr;\n }\n\n .VulnEntryPackages-item-container {\n display: grid;\n grid-template-columns: minmax(10em, 50%) minmax(5em, 20%) 1fr;\n padding: 0.5rem;\n }\n\n .VulnEntryModules {\n grid-template-columns: minmax(10em, 50%) 1fr;\n }\n\n /* Header */\n .VulnEntryPackages-item-container:first-child {\n background-color: var(--color-background-accented);\n }\n\n /* Header text */\n .VulnEntryPackages-item-container:first-child .VulnEntryPackages-attr {\n display: flex;\n font-weight: bold;\n overflow: auto;\n text-overflow: initial;\n white-space: normal;\n }\n}\n\n.VulnEntry-referenceList,\n.VulnEntry-aliases {\n line-height: 1.75rem;\n word-break: break-all;\n}\n"],
"mappings": ";;;;;AAMA,YACE,aAGF,WACE,aACA,sBACA,SACA,iBAGF,cACE,kBAGF,kCACE,kBAIF,6BACE,aACA,eACA,0BAIF,4CACE,aAGF,+BACE,+BACA,wBAIF,wBACE,aACA,0CACA,gBACA,2BAGA,uBAlDF,cAuDA,qCAEE,6BACE,WAGF,wBACE,gBAGF,4CACE,aAGF,+BACE,aAGF,wBACE,0BAGF,kCACE,aACA,2DA/EJ,cAoFE,8CACE,kDAIF,sEACE,aACA,gBACA,cACA,sBACA,oBAIJ,4CAEE,oBACA", "mappings": ";;;;;AAMA,YACE,aAGF,WACE,aACA,sBACA,SACA,iBAGF,cACE,kBAGF,kCACE,kBAIF,6BACE,aACA,eACA,0BAIF,4CACE,aAGF,+BACE,+BACA,wBAIF,wBACE,aACA,0CACA,gBACA,2BAGA,uBAlDF,cAuDA,qCAEE,6BACE,WAGF,wBACE,gBAGF,4CACE,aAGF,+BACE,aAGF,wBACE,0BAGF,kCACE,aACA,2DA/EJ,cAmFE,kBACE,2CAIF,8CACE,kDAIF,sEACE,aACA,gBACA,cACA,sBACA,oBAIJ,4CAEE,oBACA",
"names": [] "names": []
} }

Просмотреть файл

@ -41,7 +41,8 @@
</p> </p>
{{end}} {{end}}
<div class="VulnEntry"> <div class="VulnEntry">
{{template "affected" .AffectedPackages}} {{with .ModulesWithNoPackages}}{{template "affected-modules" .}}{{end}}
{{with .AffectedPackages}}{{template "affected-packages" .}}{{end}}
{{template "entry" .}} {{template "entry" .}}
</div> </div>
{{end}} {{end}}
@ -53,7 +54,7 @@
</div> </div>
{{end}} {{end}}
{{define "affected"}} {{define "affected-packages"}}
<h2>Affected Packages</h2> <h2>Affected Packages</h2>
<ul class="VulnEntryPackages VulnEntryPackages-container"> <ul class="VulnEntryPackages VulnEntryPackages-container">
<li class="VulnEntryPackages-item VulnEntryPackages-item-container"> <li class="VulnEntryPackages-item VulnEntryPackages-item-container">
@ -63,14 +64,14 @@
</li> </li>
{{range .}} {{range .}}
<li class="VulnEntryPackages-item VulnEntryPackages-item-container"> <li class="VulnEntryPackages-item VulnEntryPackages-item-container">
<div class="VulnEntryPackages-attr" data-name="Path"><a href="/{{.PackagePath}}">{{.PackagePath}}</a></div> <div class="VulnEntryPackages-attr" data-name="Path"><a href="/{{.Path}}">{{.Path}}</a></div>
<div class="VulnEntryPackages-attr" data-name="Versions">{{if .Versions}}{{.Versions}}{{else}}all versions, no known fixed{{end}}</div> <div class="VulnEntryPackages-attr" data-name="Versions">{{if .Versions}}{{.Versions}}{{else}}all versions, no known fixed{{end}}</div>
<div class="VulnEntryPackages-attr VulnEntryPackages-symbols" data-name="Symbols"> <div class="VulnEntryPackages-attr VulnEntryPackages-symbols" data-name="Symbols">
{{ $vuln := . }} {{ $vuln := . }}
{{if .ExportedSymbols}}{{ $length := len .ExportedSymbols}} {{if .ExportedSymbols}}{{ $length := len .ExportedSymbols}}
{{if lt $length 5}}<ul>{{range .ExportedSymbols}}<li><a href="/{{$vuln.PackagePath}}#{{.}}">{{.}}</a></li>{{end}}</ul> {{if lt $length 5}}<ul>{{range .ExportedSymbols}}<li><a href="/{{$vuln.Path}}#{{.}}">{{.}}</a></li>{{end}}</ul>
{{else}}<details><summary>{{len .ExportedSymbols}} affected symbols</summary> {{else}}<details><summary>{{len .ExportedSymbols}} affected symbols</summary>
<ul class="VulnEntryPackages-detailsContent">{{range .ExportedSymbols}}<li><a href="/{{$vuln.PackagePath}}#{{.}}">{{.}}</a></li>{{end}}</ul></details> <ul class="VulnEntryPackages-detailsContent">{{range .ExportedSymbols}}<li><a href="/{{$vuln.Path}}#{{.}}">{{.}}</a></li>{{end}}</ul></details>
{{end}} {{end}}
{{else if .UnexportedSymbols}} {{else if .UnexportedSymbols}}
<details><summary>{{len .UnexportedSymbols}} unexported affected symbols</summary> <details><summary>{{len .UnexportedSymbols}} unexported affected symbols</summary>
@ -87,6 +88,22 @@
</ul> </ul>
{{end}} {{end}}
{{define "affected-modules"}}
<h2>Affected Modules</h2>
<ul class="VulnEntryPackages VulnEntryPackages-container">
<li class="VulnEntryPackages-item VulnEntryPackages-item-container VulnEntryModules">
<div class="VulnEntryPackages-attr">Path</div>
<div class="VulnEntryPackages-attr">Versions</div>
</li>
{{range .}}
<li class="VulnEntryPackages-item VulnEntryPackages-item-container VulnEntryModules">
<div class="VulnEntryPackages-attr" data-name="Path"><a href="/{{.Path}}">{{.Path}}</a></div>
<div class="VulnEntryPackages-attr" data-name="Versions">{{if .Versions}}{{.Versions}}{{else}}all versions, no known fixed{{end}}</div>
</li>
{{end}}
</ul>
{{end}}
{{define "entry"}} {{define "entry"}}
{{$e := .Entry}} {{$e := .Entry}}
{{if .AliasLinks}} {{if .AliasLinks}}

Двоичные данные
tests/screentest/testdata/ci/vuln-entry-no-packages-540x1080.a.png поставляемый

Двоичный файл не отображается.

До

Ширина:  |  Высота:  |  Размер: 194 KiB

После

Ширина:  |  Высота:  |  Размер: 208 KiB

Двоичные данные
tests/screentest/testdata/ci/vuln-entry-no-packages.a.png поставляемый

Двоичный файл не отображается.

До

Ширина:  |  Высота:  |  Размер: 205 KiB

После

Ширина:  |  Высота:  |  Размер: 216 KiB