Граф коммитов

2 Коммитов

Автор SHA1 Сообщение Дата
Maceo Thompson 881b1e909f internal/report, cmd/vulnreport, data/excluded: require excluded reports to have module information.
Modify report.Lint() so that it requires all excluded report (aside from Not Go Code) to also have module information. Also modifies createExcluded to be more robust against malformed and unreachable module paths in github issue titles.

This (in addition to go/dev/cl/446868) allows us to add some module information to every report. Ideally, this will allow us to check if anyone is importing the modules mentioned in the excluded reports for our metrics.

Change-Id: I783aea978760a70a0cccd30ad454d1fadfb85997
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/448837
Run-TryBot: Maceo Thompson <maceothompson@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-11-16 18:04:35 +00:00
Julie Qiu 2954611bbb data/excluded: add GO-2022-0977.yaml for CVE-2022-36049
Fixes golang/vulndb#977

Change-Id: I3a4c2238e9d4fa5bef83ebe55d1d6cf8cfe44223
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430361
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Julie Qiu <julieqiu@google.com>
2022-09-13 17:31:58 +00:00