Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloudwf 2062 - address discrepancies in vuln generation #22

Open
wants to merge 94 commits into
base: oval-v2
Choose a base branch
from
Open

Cloudwf 2062 - address discrepancies in vuln generation #22

Show file tree
Hide file tree
Changes from 90 commits
Commits
Show all changes
94 commits
Select commit Hold shift + click to select a range
1987d80
CLAIR-262: add oval v2 class for parsing oval manifest, tests
johnbe11 Mar 13, 2020
f6a63f4
removed unused import
johnbe11 Mar 16, 2020
dc5411f
CLAIR-263: updated oval v2 class to check oval manifest for only new …
johnbe11 Mar 16, 2020
ff6a485
CLAIR-263: updated struct names, cleanup in oval v2 class for checkin…
johnbe11 Mar 16, 2020
76840d7
CLAIR-264: added parse utilities for cpe names and rpm names, tests
johnbe11 Mar 19, 2020
7cb7102
CLAIR-264: added module namespace parsing, tests, cleanup
johnbe11 Mar 25, 2020
ae25c73
CLAIR-269: added package filtering by arch, tests
johnbe11 Mar 26, 2020
d5f1d1b
WIP: refactored oval2 plugin and tests, based on changes required for…
johnbe11 Apr 27, 2020
fdc01f8
WIP: additional refactor for oval2 plugin and tests, fix nvra parsing…
johnbe11 May 6, 2020
49d36b0
fix refactor issue: restore rewire for vuln namespace
johnbe11 May 12, 2020
076f539
fix refactor issue: add check for empty lookup date, update test to c…
johnbe11 May 12, 2020
19e989d
WIP: refactor, cleanup, and fixes related to most recent PR review notes
johnbe11 May 18, 2020
f72ba12
WIP: additional refactor/cleanup from PR review
johnbe11 May 19, 2020
9b6a973
ensure redhat package is enabled by default for make deploy-local
johnbe11 May 19, 2020
2fc042e
updated logging for redhat package
johnbe11 May 19, 2020
10799f4
cleanup comments, clarify logging in redhat package
johnbe11 May 19, 2020
9026fad
updated logging in redhat package, cleanup, moved db key/val date wri…
johnbe11 May 19, 2020
d06c2b8
added check to prevent advisories with severity "none" from being sto…
johnbe11 May 21, 2020
da73e32
cleanup: removed trailing whitespace
johnbe11 May 26, 2020
4399212
use all cpe entries from affected_cpe_list (previously was intentiona…
johnbe11 May 28, 2020
fa4bbed
updated supported arch check to support pattern-based arch lists
johnbe11 May 28, 2020
9ae83e9
removed no longer used function (ParseCpeStructFromAffectedCpeList)
johnbe11 May 28, 2020
d43dc7a
removed no longer used function (ParseCpeName)
johnbe11 May 28, 2020
5a15088
cleanup - removed redundant variable usage in GatherUnprocessedAdviso…
johnbe11 May 28, 2020
6f72eab
cleanup - removed redundant second parse for already-parsed package list
johnbe11 May 28, 2020
eefaa8c
updated feature creation for module namespaces, to create a feature f…
johnbe11 May 28, 2020
083dd6b
removed no longer used function (ConstructVulnerabilityNames)
johnbe11 May 28, 2020
d2ac9f3
removed no longer used function (IsRmpArchSupported)
johnbe11 May 28, 2020
55ccb41
updated supported arch check to use regexp matcher
johnbe11 May 28, 2020
fe51a37
refactored updater to use map of flags instead of just one flag (Flag…
johnbe11 May 28, 2020
c2eacc2
cleanup - removed no longer used functions, related tests
johnbe11 May 29, 2020
91d3525
updated dependencies in go.sum to point to public repo
johnbe11 May 29, 2020
32657d6
add separate flag for last advisory date
johnbe11 Jun 1, 2020
ec3d0a3
added support for checking definition class, test; only process patch…
johnbe11 Jun 1, 2020
1c25f09
removed redundant entries from supported definition types
johnbe11 Jun 1, 2020
d80fcd9
cleanup, add check for non-empty parsed nvra data
johnbe11 Jun 2, 2020
3628881
cleanup, lint-related formatting/comments
johnbe11 Jun 2, 2020
fc2b900
Merge branch 'oval-v2' into CLAIR-221_use_public_oval_v2_data
johnbe11 Jun 3, 2020
073e3e0
fixed errors in go.mod, go.sum from rebase conflicts
johnbe11 Jun 4, 2020
f6430be
fixed errors in ubuntu package from rebase conflicts
johnbe11 Jun 4, 2020
1790ea7
CLOUDWF-160: externalize base url for oval v2 data, to support fake a…
johnbe11 Jun 15, 2020
18bed30
cwf129: add check to skip duplicate packages, corresponding test, add…
johnbe11 Jun 27, 2020
b553fa5
cwf129: additional checks to skip duplicate vulnerability data (filte…
johnbe11 Jun 29, 2020
13230c9
cwf129: additional checks to skip duplicate vulnerability data (filte…
johnbe11 Jun 30, 2020
fafb398
cwf129: cleanup (formatting)
johnbe11 Jul 1, 2020
9192836
cwf129: updated check for relevant criteria to include module criteri…
johnbe11 Jul 1, 2020
299751f
CLAIR-262: add oval v2 class for parsing oval manifest, tests
johnbe11 Mar 13, 2020
f8497fd
removed unused import
johnbe11 Mar 16, 2020
0443b26
CLAIR-263: updated oval v2 class to check oval manifest for only new …
johnbe11 Mar 16, 2020
794a35b
CLAIR-263: updated struct names, cleanup in oval v2 class for checkin…
johnbe11 Mar 16, 2020
4abd16e
CLAIR-264: added parse utilities for cpe names and rpm names, tests
johnbe11 Mar 19, 2020
a759d7f
CLAIR-264: added module namespace parsing, tests, cleanup
johnbe11 Mar 25, 2020
4ce4b79
CLAIR-269: added package filtering by arch, tests
johnbe11 Mar 26, 2020
5069dd7
WIP: refactored oval2 plugin and tests, based on changes required for…
johnbe11 Apr 27, 2020
b0b8487
WIP: additional refactor for oval2 plugin and tests, fix nvra parsing…
johnbe11 May 6, 2020
2bad8ae
fix refactor issue: restore rewire for vuln namespace
johnbe11 May 12, 2020
178ce7e
fix refactor issue: add check for empty lookup date, update test to c…
johnbe11 May 12, 2020
0780a1f
WIP: refactor, cleanup, and fixes related to most recent PR review notes
johnbe11 May 18, 2020
159be5c
WIP: additional refactor/cleanup from PR review
johnbe11 May 19, 2020
32dd7c8
updated logging for redhat package
johnbe11 May 19, 2020
9117dcd
cleanup comments, clarify logging in redhat package
johnbe11 May 19, 2020
f2c2fb5
updated logging in redhat package, cleanup, moved db key/val date wri…
johnbe11 May 19, 2020
0bf1c30
added check to prevent advisories with severity "none" from being sto…
johnbe11 May 21, 2020
7b72d7c
cleanup: removed trailing whitespace
johnbe11 May 26, 2020
1761d55
use all cpe entries from affected_cpe_list (previously was intentiona…
johnbe11 May 28, 2020
b3813f6
updated supported arch check to support pattern-based arch lists
johnbe11 May 28, 2020
b10b306
removed no longer used function (ParseCpeStructFromAffectedCpeList)
johnbe11 May 28, 2020
05792ff
removed no longer used function (ParseCpeName)
johnbe11 May 28, 2020
426a71f
cleanup - removed redundant variable usage in GatherUnprocessedAdviso…
johnbe11 May 28, 2020
9699643
cleanup - removed redundant second parse for already-parsed package list
johnbe11 May 28, 2020
f4aee90
updated feature creation for module namespaces, to create a feature f…
johnbe11 May 28, 2020
8cf16e7
removed no longer used function (ConstructVulnerabilityNames)
johnbe11 May 28, 2020
fd9ee4d
removed no longer used function (IsRmpArchSupported)
johnbe11 May 28, 2020
d984ce9
updated supported arch check to use regexp matcher
johnbe11 May 28, 2020
d613c15
refactored updater to use map of flags instead of just one flag (Flag…
johnbe11 May 28, 2020
f0a91e7
cleanup - removed no longer used functions, related tests
johnbe11 May 29, 2020
3245add
updated dependencies in go.sum to point to public repo
johnbe11 May 29, 2020
64f616e
add separate flag for last advisory date
johnbe11 Jun 1, 2020
56f229e
added support for checking definition class, test; only process patch…
johnbe11 Jun 1, 2020
bdd1b53
removed redundant entries from supported definition types
johnbe11 Jun 1, 2020
9171358
cleanup, add check for non-empty parsed nvra data
johnbe11 Jun 2, 2020
10c6709
cleanup, lint-related formatting/comments
johnbe11 Jun 2, 2020
42235b8
fixed errors in ubuntu package from rebase conflicts
johnbe11 Jun 4, 2020
3692290
CLOUDWF-160: externalize base url for oval v2 data, to support fake a…
johnbe11 Jun 15, 2020
401f131
cwf129: add check to skip duplicate packages, corresponding test, add…
johnbe11 Jun 27, 2020
d44b2d2
cwf129: additional checks to skip duplicate vulnerability data (filte…
johnbe11 Jun 29, 2020
0a74bf1
cwf129: additional checks to skip duplicate vulnerability data (filte…
johnbe11 Jun 30, 2020
29b09a0
cwf129: cleanup (formatting)
johnbe11 Jul 1, 2020
fa355df
cwf129: updated check for relevant criteria to include module criteri…
johnbe11 Jul 1, 2020
5a96cbc
Merge branch 'CLOUDWF-129_updateintegration_tests' of https://github.…
johnbe11 Jul 2, 2020
875208b
cwf129: updated cpe parse to exclude empty names, added test, test data
johnbe11 Jul 2, 2020
56ebf76
cwf129: cleanup (formatting)
johnbe11 Jul 2, 2020
e4eac8b
cwf129: cleanup - removed plugin-local log level assignment
johnbe11 Jul 3, 2020
cf1c013
cwf129: updated dup vulnerability identification strategy to ensure a…
johnbe11 Jul 3, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading