aboutcode-org / aboutcode-org/vulnerablecode

Multiple warnings when using github_osv.GithubOSVImporter

Open
#1,691 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

When trying to import the advisories using `github_osv.GithubOSVImporter`, I encountered multiple warnings:

> Unsupported package type
```
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '111.18.0'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '300.0.0'}, {'fixed': '300.0.5'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '111.18.0'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'regex'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '1.5.5'}]}]} in OSV: 'GHSA-m5pq-gvj9-9vr8'
...
```
> Unsupported severity type
```

```
> Invalid vulnerability reference
```
Invalid vulnerability reference: : {'url': ['Enter a valid URL.]}
```
> Invalid version class
```
Invalid version class: - '10.0.2-1.1' for OSV id: 'GHSA-hvxr-2fvv-c3wq'
```

After running `python3 manage.py import vulnerabilities.importers.github_osv.GithubOSVImporter` completely, there are only 21,260 records.

```
select count(id) from vulnerabilities_advisory va where created_by = 'vulnerabilities.importers.github_osv.GithubOSVImporter'
>> 21,260
```
Is this because a lot of the advisories were ignored due to the above issues?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.