Skip to content

Commit 1d2aaee

Browse files
committed
Use only latest per avid aadvisories to compute package risk score
Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
1 parent f971d9d commit 1d2aaee

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

vulnerabilities/pipelines/v2_improvers/compute_package_risk.py

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -130,8 +130,14 @@ def compute_and_store_vulnerability_risk_score(self):
130130
)
131131

132132
def compute_and_store_package_risk_score(self):
133+
134+
latest_advisories = AdvisoryV2.objects.latest_per_avid()
135+
133136
qs = (
134-
PackageV2.objects.filter(affected_in_impacts__advisory__risk_score__isnull=False)
137+
PackageV2.objects.filter(
138+
affected_in_impacts__advisory__risk_score__isnull=False,
139+
affected_in_impacts__advisory__in=latest_advisories,
140+
)
135141
.annotate(computed_risk=Max("affected_in_impacts__advisory__risk_score"))
136142
.only("id")
137143
)

0 commit comments

Comments
 (0)