Skip to content

Commit 2e4318a

Browse files
committed
Add Archlinux severity system
Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
1 parent fa1af1e commit 2e4318a

File tree

2 files changed

+15
-22
lines changed

2 files changed

+15
-22
lines changed

vulnerabilities/pipelines/v2_importers/archlinux_importer.py

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,7 @@ def collect_advisories(self) -> Iterable[AdvisoryDataV2]:
5656
def parse_advisory(self, record) -> AdvisoryDataV2:
5757
affected_packages = []
5858
references = []
59+
severities = []
5960
avg_name = record.get("name")
6061
severity = record.get("severity")
6162
aliases = record.get("issues", [])
@@ -96,13 +97,17 @@ def parse_advisory(self, record) -> AdvisoryDataV2:
9697
)
9798
)
9899

99-
severities = [
100-
VulnerabilitySeverity(
101-
system=severity_systems.ARCHLINUX,
102-
value=severity,
103-
url="https://security.archlinux.org/{avg_name}.json",
104-
)
105-
]
100+
if severity not in severity_systems.ARCHLINUX.choices:
101+
self.log(f"Unknown severity {severity} for {avg_name}")
102+
severity = None
103+
if severity:
104+
severities = [
105+
VulnerabilitySeverity(
106+
system=severity_systems.ARCHLINUX,
107+
value=severity,
108+
url="https://security.archlinux.org/{avg_name}.json",
109+
)
110+
]
106111

107112
return AdvisoryDataV2(
108113
advisory_id=avg_name,

vulnerabilities/tests/test_data/archlinux/archlinux_advisoryv2-expected.json

Lines changed: 3 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -29,13 +29,7 @@
2929
}
3030
],
3131
"patches": [],
32-
"severities": [
33-
{
34-
"system": "generic_textual",
35-
"value": "Unknown",
36-
"scoring_elements": ""
37-
}
38-
],
32+
"severities": [],
3933
"date_published": null,
4034
"weaknesses": [],
4135
"url": "https://security.archlinux.org/AVG-2781.json"
@@ -72,13 +66,7 @@
7266
}
7367
],
7468
"patches": [],
75-
"severities": [
76-
{
77-
"system": "generic_textual",
78-
"value": "Unknown",
79-
"scoring_elements": ""
80-
}
81-
],
69+
"severities": [],
8270
"date_published": null,
8371
"weaknesses": [],
8472
"url": "https://security.archlinux.org/AVG-2780.json"
@@ -121,7 +109,7 @@
121109
"patches": [],
122110
"severities": [
123111
{
124-
"system": "generic_textual",
112+
"system": "archlinux",
125113
"value": "Low",
126114
"scoring_elements": ""
127115
}

0 commit comments

Comments
 (0)