Граф коммитов

3 Коммитов

Автор SHA1 Сообщение Дата
Maceo Thompson 4b2e40139f cmd/vulnreport, internal/cvelistrepo: refactor FetchCVE to make repeated calls more efficient
We previously passed in a path to a repo which forced the vulnreport command to clone/open the github repo every time we added a new report. Now, we use a git.Repository pointer instead of path to git repo (as a string) as an arg for FetchCVE and in vulnreport/main.go's createCfg struct. When adding multiple reports in a single command, that clone/open logic will only occur once.

Change-Id: I92dd6dbf6fe52d704f27663dca98a5668ec8cf56
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/445636
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
2022-10-28 21:31:33 +00:00
Tatiana Bradley 4337df1fe1 internal/worker: avoid filing duplicate issues for CVEs with GHSAs
Change-Id: I2aed179b4a3e20e75bb176a535c1aa97326569c8
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/432178
Reviewed-by: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2022-10-26 17:32:03 +00:00
Jonathan Amsterdam 12508860a4 internal/cvelistrepo: package for the cvelist repo
Create a package for working with github.com/CVEProject/cvelist.

Change-Id: Iadac53c0f13ba658bc20a9bd4f74d58ade5a4f44
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/375716
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julie@golang.org>
2022-01-05 23:58:01 +00:00