starlingx
/
tools
Code Issues Proposed changes
tools/cve_support
History
Zhixiong Chi 9cdb43da42 cve_policy_filter.py: Get the filter data from nvd@nist.gov item 
Now the latest json format result file includes the several items
in the set data["scannedCves"][cve_id]["cveContents"]["nvd"], so
the original usage is not available to filter CVE info anymore.

So it's time to drop the exception which is to raise this condition
that the length is greater than 1. It will be failed to throw the
exception. We are going to use the condition 'source=nvd@nist.gov'
to get the accurate CVE information instead.

Another update is to expand the function find_lp_assigned with
adding new condition to find the CVE id in the description section
of the LP page. As the length of title is limited, if one page is
used to track many CVE issues, the length may be not enough to
record all CVE ID items.

Closes-Bug: 2059996

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Change-Id: Ia7dfee5db53baaa82a8e6dd9d5dde8a31da5bcc2
 		2024-04-22 23:15:10 -04:00
..
cve_policy_filter.py cve_policy_filter.py: Get the filter data from nvd@nist.gov item 2024-04-22 23:15:10 -04:00
lp.py cve_policy_filter.py: Get the filter data from nvd@nist.gov item 2024-04-22 23:15:10 -04:00
template.txt cve_policy_filter: Create new list to track the fixed LP CVE issue 2022-12-04 21:01:51 -05:00
template_v3.txt cve_policy_filter: Create new list to track the fixed LP CVE issue 2022-12-04 21:01:51 -05:00