aboutcode-org / aboutcode-org/vulnerablecode

How can we pass useful data from importer to improver?

未关闭
#994 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
improver
主要语言
Python
星标
702
派生
328
平均合并
3 天 8 小时
30 天内合并 PR
3

描述

For example ruby importer/improver: #799
https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2022-28738.yml
```
patched_versions = record.get("patched_versions", []) # [ ~> 3.0.4 , >= 3.1.2 ]
fixed_version_ranges = [GemVersionRange.from_native(v) for v in patched_versions] # type: List[VersionRange]

unaffected_versions = record.get("unaffected_versions", []) # [ ~> 2.6.0 , ~> 2.7.0]
unaffected_versions_ranges = [GemVersionRange.from_native(v) for v in unaffected_versions]# type: List[VersionRange]

affected_packages = AffectedPackage(purl,affected_version_range= ,fixed_version=) # How can we fill this?
```
AffectedPackage type should be :
`affected_version_range: VersionRange | None `
`fixed_version: Version | None `

To pass `affected_version_range` and/or `fixed_version` as a argument for `AffectedPackage`
it is required to use `RubyVersionAPI()` but we should use `RubyVersionAPI()` only at improver

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。