Граф коммитов

6 Коммитов

Автор SHA1 Сообщение Дата
Tatiana Bradley 69d9a200a8 data: apply REVIEWED status to all existing reports and osv
Change-Id: I862c5bb24b9c08c29f0d437fd1be61da0319ef0d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/585517
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
2024-05-20 16:03:47 +00:00
Tatiana Bradley 4d4a361097 internal/{osv,report}, data: publish summaries to OSV
Modify ToOSV to publish the summary from the YAML report to OSV, and
apply this change to each existing OSV report.

For golang/go#56443

Change-Id: Iee78fe75f42fe9a52c6e4023ee9ad8dfa5feba8d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/501203
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2023-06-12 18:45:41 +00:00
Tatiana Bradley 0910814825 internal/report, all: allow multiple credits in YAML reports
Allow multiple credits in YAML reports to move closer to format of
OSV and CVEs.

Change all the YAML reports to use this new field, and update any
OSVs/CVEs that now have multiple credits.

Change-Id: I6452cb51614b44c86ec6fa47a7bce68976be8f9e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/496163
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
2023-05-18 20:38:56 +00:00
Tatiana Bradley 264b406b71 internal/osv, all: move DatabaseSpecific osv field
Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead
of a subfield of the Affected field.

Change-Id: I8c80f8af268b51d57833268b89947838c53e407a
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-04-03 15:57:51 +00:00
Maceo Thompson 93f50fcb7c internal/report, data/osv: populate schema_version field in osv entries
The vulnreport osv command now populates all generated osvs with the current schema version (1.3.1).
This CL also updates all previous OSV entries to also have the current schema version.

Change-Id: Ie95c91aae0ee623bbf50ff047190a0bbe59893d9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/452440
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
2022-11-21 19:50:45 +00:00
Zvonimir Pavlinovic a8695ec45e data/reports: add GO-2022-1098.yaml
Aliases: CVE-2022-44797, GHSA-2chg-86hq-7w38

Fixes golang/vulndb#1098

Change-Id: Ibb647ca668635dbaa2321c8fbc4a14451fa02d70
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/448536
Reviewed-by: Damien Neil <dneil@google.com>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2022-11-08 16:49:06 +00:00