Граф коммитов

6 Коммитов

Автор SHA1 Сообщение Дата
Tatiana Bradley 801aeef988 data/reports: add GHSA to GO-2021-0051.yaml
Aliases: CVE-2020-36565, GHSA-j453-hm5x-c46w

Updates golang/vulndb#51
Fixes golang/vulndb#1145

Change-Id: I8bf1cc851d396c5bb0a4e33f065a89c4ef570605
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/457015
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2022-12-12 21:25:23 +00:00
Maceo Thompson 93f50fcb7c internal/report, data/osv: populate schema_version field in osv entries
The vulnreport osv command now populates all generated osvs with the current schema version (1.3.1).
This CL also updates all previous OSV entries to also have the current schema version.

Change-Id: Ie95c91aae0ee623bbf50ff047190a0bbe59893d9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/452440
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
2022-11-21 19:50:45 +00:00
Tatiana Bradley e21719caff internal/database, data/osv: trim whitespace characters in OSV description
In GenerateOSVEntry, replace all whitespace characters with single spaces
except for paragraph breaks represented by "\n\n".

Change-Id: Ia03f0b53c94979fada6316be1346df3f48b9fabe
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/439044
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-10-26 17:44:45 +00:00
Aaqa Ishtyaq 4c804906bd internal/database: add credits in the osv report
- Update `golang.org/x/vuln/osv`.
- Output credits in the OSV report from the YAML report.
- Update `data/osv` to include `credits`.

Fixes golang/go#55956

Change-Id: I8b1a81f33ca7b2832394be316b7d015c8a281220
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/435976
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Auto-Submit: Damien Neil <dneil@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2022-10-21 20:22:39 +00:00
Zvonimir Pavlinovic ab17fd8b67 data: update derived symbols for some reports
Due to change in how we handle GOOS and GOARCH in cmd/vulnreport.

Change-Id: I3d51a3b3af28a85b37886e536740c14a5bde9903
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/438717
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
2022-10-05 15:18:19 +00:00
Damien Neil ea89353760 data/osv: add OSV entries for all reports
Create data/osv, containing the OSV version for all reports.
This directory will be used as the source for database generation
in the future.

Set creation times on all existing reports; future reports will
take the creation time from the OSV entry history.

Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-20 15:16:04 +00:00