-
-
Notifications
You must be signed in to change notification settings - Fork 303
Add CloudVulnDB importer for issue #1511 #2217
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
95cf5e6
7faf3cf
b4ab457
90fe206
66d2525
cae95fe
736c1fb
f7a0e99
d8436bb
ffef300
e57efe0
b77c68d
c5de735
daa490e
472f17b
93e1b74
857c692
1991ce8
ce44242
9911790
b7e51a9
43f74b5
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -40,10 +40,21 @@ python_files = "*.py" | |
| python_classes = "Test" | ||
| python_functions = "test" | ||
|
|
||
| filterwarnings = [ | ||
| "ignore:Unknown config option.*:pytest.PytestConfigWarning", | ||
| 'ignore:datetime.datetime.utcfromtimestamp\(\) is deprecated and scheduled for removal.*:DeprecationWarning', | ||
| "ignore:CheckConstraint.check is deprecated in favor of `.condition`.:django.utils.deprecation.RemovedInDjango60Warning", | ||
| ] | ||
|
|
||
| addopts = [ | ||
| "-rfExXw", | ||
| "--strict-markers", | ||
| "--doctest-modules", | ||
| # setup.py imports setuptools which is not available in the Docker runtime | ||
| # image. Without this, pytest (which uses python_files = "*.py") tries to | ||
| # collect setup.py as a test module and crashes with exit code 2. | ||
| "--ignore=setup.py", | ||
| "--ignore-glob=*/setup.py", | ||
|
Comment on lines
+43
to
+57
Collaborator
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Please avoid unrelated changes to the PR. |
||
| # Ignore the following doctests until these files are migrated to | ||
| # import-improve structure | ||
| "--ignore=vulnerabilities/importers/apache_httpd.py", | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -45,12 +45,14 @@ | |
| from vulnerabilities.pipelines.v2_importers import apache_kafka_importer as apache_kafka_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import apache_tomcat_importer as apache_tomcat_v2 | ||
| from vulnerabilities.pipelines.v2_importers import archlinux_importer as archlinux_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import cloudvulndb_importer as cloudvulndb_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import collect_fix_commits as collect_fix_commits_v2 | ||
| from vulnerabilities.pipelines.v2_importers import curl_importer as curl_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import debian_importer as debian_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import ( | ||
| elixir_security_importer as elixir_security_importer_v2, | ||
| ) | ||
| from vulnerabilities.pipelines.v2_importers import enisa_nisa_importer as enisa_nisa_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import epss_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import fireeye_importer_v2 | ||
| from vulnerabilities.pipelines.v2_importers import gentoo_importer as gentoo_importer_v2 | ||
|
|
@@ -107,6 +109,8 @@ | |
| project_kb_msr2019_importer_v2.ProjectKBMSR2019Pipeline, | ||
| ruby_importer_v2.RubyImporterPipeline, | ||
| epss_importer_v2.EPSSImporterPipeline, | ||
| cloudvulndb_importer_v2.CloudVulnDBImporterPipeline, | ||
| enisa_nisa_importer_v2.EnisaNisaImporterPipeline, | ||
|
Comment on lines
+112
to
+113
Collaborator
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. To keep things simple, let’s split each importer into its own PR, but we should first double-check the quality of the data source. |
||
| gentoo_importer_v2.GentooImporterPipeline, | ||
| nginx_importer_v2.NginxImporterPipeline, | ||
| debian_importer_v2.DebianImporterPipeline, | ||
|
|
||
Uh oh!
There was an error while loading. Please reload this page.