зеркало из https://github.com/golang/vulndb.git
32 строки
1.0 KiB
Bash
Executable File
32 строки
1.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Copyright 2022 The Go Authors. All rights reserved.
|
|
# Use of this source code is governed by a BSD-style
|
|
# license that can be found in the LICENSE file.
|
|
|
|
set -ex
|
|
|
|
# Make a full clone of the repo so that gendb can find missing PublishDates in
|
|
# reports by reading the commit history.
|
|
#
|
|
# Kokoro creates a shallow clone. Attempts to
|
|
# deepen the clone with `git fetch --unshallow` failed,
|
|
# apparently because Kokoro uses the `rpc:` scheme to
|
|
# clone the repo.
|
|
|
|
git clone https://go.googlesource.com/vulndb
|
|
cd vulndb
|
|
|
|
# Copy the existing vuln DB into a local directory so we can diff it.
|
|
mkdir old-db
|
|
gsutil -q -m cp -r gs://go-vulndb/* old-db
|
|
|
|
# Generate a copy of the DB using the current state of the repo
|
|
# and diff it with the old one. Do all this in a docker container
|
|
# so we can select the version of Go that we want.
|
|
docker run --rm \
|
|
-v $PWD:/vulndb \
|
|
-w /vulndb \
|
|
golang:1.21.5 \
|
|
/bin/bash -c 'go run ./cmd/gendb -repo /vulndb -out new-db &&
|
|
go run ./cmd/dbdiff old-db new-db'
|