aboutcode-org / aboutcode-org/vulnerablecode

Advisories created by alpine importer contain no version information

Open
#496 1 comment 0 reactions 0 assignees View on GitHub
bug data-quality import-improver-migration
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

After https://github.com/nexB/vulnerablecode/pull/436, the Advisory creation by alpine importer looks like
```py
advisories.append(
Advisory(
summary="",
references=references,
vulnerability_id=vuln_ids[0] if is_cve(vuln_ids[0]) else "",
)
)
```
This does not contain any version information (vuln, affected) at all.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.