aboutcode-org / aboutcode-org/vulnerablecode

Multiple warnings when using github_osv.GithubOSVImporter

未關閉
#1,691 1 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Python
星號
702
分支
328
平均合併
3 天 8 小時
30 天內合併 PR
3

描述

When trying to import the advisories using `github_osv.GithubOSVImporter`, I encountered multiple warnings:

> Unsupported package type
```
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '111.18.0'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '300.0.0'}, {'fixed': '300.0.5'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'openssl-src'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '111.18.0'}]}]} in OSV: 'GHSA-x3mh-jvjw-3xwx'
Unsupported package type: {'package': {'ecosystem': 'crates.io', 'name': 'regex'}, 'ranges': [{'type': 'ECOSYSTEM', 'events': [{'introduced': '0'}, {'fixed': '1.5.5'}]}]} in OSV: 'GHSA-m5pq-gvj9-9vr8'
...
```
> Unsupported severity type
```

```
> Invalid vulnerability reference
```
Invalid vulnerability reference: : {'url': ['Enter a valid URL.]}
```
> Invalid version class
```
Invalid version class: - '10.0.2-1.1' for OSV id: 'GHSA-hvxr-2fvv-c3wq'
```

After running `python3 manage.py import vulnerabilities.importers.github_osv.GithubOSVImporter` completely, there are only 21,260 records.

```
select count(id) from vulnerabilities_advisory va where created_by = 'vulnerabilities.importers.github_osv.GithubOSVImporter'
>> 21,260
```
Is this because a lot of the advisories were ignored due to the above issues?

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。