vulnerablecode icon indicating copy to clipboard operation
vulnerablecode copied to clipboard

Add curl advisories importer

Open ambuj-1211 opened this issue 1 year ago • 19 comments

This pr resolves the issue #1166. The advisories were added properly and the site was working fine. I also registered the importer in the init.py file. This image shows the curl advisories in vulnerablecode

ambuj-1211 avatar Mar 17 '24 20:03 ambuj-1211

@TG1999 please let me know if there are any further changes and everything is correct or not.

ambuj-1211 avatar Mar 17 '24 20:03 ambuj-1211

on it

ambuj-1211 avatar Mar 31 '24 07:03 ambuj-1211

@ziadhany @TG1999 Done with the changes as mentioned.

ambuj-1211 avatar Apr 07 '24 21:04 ambuj-1211

@ambuj-1211 please add a curl improver to the valid_versions.py

ex: https://github.com/nexB/vulnerablecode/blob/main/vulnerabilities/improvers/valid_versions.py#L472

ziadhany avatar Apr 09 '24 22:04 ziadhany

work! just a few nits for your consi

I think you tagged someone else in this comment, is it a mistake? And I am working on the changes now.

ambuj-1211 avatar Apr 10 '24 09:04 ambuj-1211

work! just a few nits for your consi

I think you tagged someone else in this comment, is it a mistake? And I am working on the changes now.

sorry it was a mistake and I fixed it

ziadhany avatar Apr 10 '24 13:04 ziadhany

@ziadhany please review the changes and do let me know.

ambuj-1211 avatar Apr 12 '24 18:04 ambuj-1211

@ziadhany I made the changes, should I also update my branch?

ambuj-1211 avatar Apr 13 '24 01:04 ambuj-1211

@ambuj-1211 Absolutely! Once all the changes are in place, squashing them into a single commit before merging will create a cleaner history for everyone.

to fix the test update the vulnerabilities/tests/test_data/curl/expected-curl-advisory-output.json and it would be good if you add more test examples : vulnerabilities/tests/test_data/curl/expected-curl-advisory-output1.json vulnerabilities/tests/test_data/curl/expected-curl-advisory-output2.json

ziadhany avatar Apr 13 '24 16:04 ziadhany

@ziadhany @TG1999 i have made all the required changes and squashed all the commits to make the history clean, moreover I also had updated my branch according to the main branch. Please review it.

ambuj-1211 avatar May 07 '24 18:05 ambuj-1211

@ziadhany some checks are not successfull but they are because of openssl url do I need to change it to some thing, I am asking because it is not related to curl advisories.

ambuj-1211 avatar May 09 '24 15:05 ambuj-1211

@ziadhany some checks are not successfull but they are because of openssl url do I need to change it to some thing, I am asking because it is not related to curl advisories.

@ambuj-1211 No, this is the docs test ( not related to this pull request )

ziadhany avatar May 09 '24 16:05 ziadhany

so this pr is good to go?

ambuj-1211 avatar May 09 '24 17:05 ambuj-1211

@ziadhany check the files now I have changed the files and squashed the commits, I think now the history and everything is clean and good to go, please let me know if there are any more nits.

ambuj-1211 avatar May 10 '24 13:05 ambuj-1211

@ambuj-1211 please resolve conflicts on this PR

TG1999 avatar Jul 22 '24 15:07 TG1999

@ziadhany is this PR good to merge, if yes please merge this in. Thanks!

TG1999 avatar Jul 22 '24 15:07 TG1999

@ziadhany is this PR good to merge, if yes please merge this in. Thanks!

@TG1999 Yes, I have reviewed this pull request several times and I believe we should merge it.

ziadhany avatar Jul 23 '24 06:07 ziadhany

@ambuj-1211 please see tests are failing

TG1999 avatar Aug 06 '24 08:08 TG1999

corrected the code now check @TG1999

ambuj-1211 avatar Aug 20 '24 12:08 ambuj-1211

@TG1999 please have a look on the log file curlimporterlogs.txt

ambuj-1211 avatar Sep 10 '24 16:09 ambuj-1211

@ambuj-1211 thanks! merged!

TG1999 avatar Sep 12 '24 10:09 TG1999