Skip to content

Commit fa1af1e

Browse files
TG1999TG1999
committed
Address review comments
Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
1 parent ff65b22 commit fa1af1e

File tree

3 files changed

+83
-72
lines changed

3 files changed

+83
-72
lines changed

‎PIPELINES-AVID.rst‎

Lines changed: 74 additions & 71 deletions
Original file line numberDiff line numberDiff line change
@@ -1,71 +1,74 @@
1-
+-------------------------------+--------------------------------------------------------------+
2-
| pipeline name | AVID |
3-
+===============================+==============================================================+
4-
| alpine_linux_importer_v2 | {package_name}/{distroversion}/{version}/{vulnerability_id} |
5-
+-------------------------------+--------------------------------------------------------------+
6-
| aosp_dataset_fix_commits | CVE ID of the record |
7-
+-------------------------------+--------------------------------------------------------------+
8-
| apache_httpd_importer_v2 | CVE ID of the record |
9-
+-------------------------------+--------------------------------------------------------------+
10-
| apache_kafka_importer_v2 | CVE ID of the record |
11-
+-------------------------------+--------------------------------------------------------------+
12-
| apache_tomcat_importer_v2 | {page_id}/{cve_id} |
13-
+-------------------------------+--------------------------------------------------------------+
14-
| archlinux_importer_v2 | AVG ID of the record |
15-
+-------------------------------+--------------------------------------------------------------+
16-
| curl_importer_v2 | CURL-CVE ID of the record |
17-
+-------------------------------+--------------------------------------------------------------+
18-
| debian_importer_v2 | {package_name}/{debian_record_id} |
19-
+-------------------------------+--------------------------------------------------------------+
20-
| elixir_security_importer_v2 | {package_name}/{file_id} |
21-
+-------------------------------+--------------------------------------------------------------+
22-
| epss_importer_v2 | CVE ID of the record |
23-
+-------------------------------+--------------------------------------------------------------+
24-
| fireeye_importer_v2 | {file_id} |
25-
+-------------------------------+--------------------------------------------------------------+
26-
| gentoo_importer_v2 | GLSA ID of the record |
27-
+-------------------------------+--------------------------------------------------------------+
28-
| github_osv_importer_v2 | ID of the OSV record |
29-
+-------------------------------+--------------------------------------------------------------+
30-
| gitlab_importer_v2 | Identifier of the GitLab community advisory record |
31-
+-------------------------------+--------------------------------------------------------------+
32-
| istio_importer_v2 | ISTIO-SECURITY-<ID> |
33-
+-------------------------------+--------------------------------------------------------------+
34-
| mattermost_importer_v2 | MMSA-<ID> |
35-
+-------------------------------+--------------------------------------------------------------+
36-
| mozilla_importer_v2 | MFSA-<ID> |
37-
+-------------------------------+--------------------------------------------------------------+
38-
| nginx_importer_v2 | First alias of the record |
39-
+-------------------------------+--------------------------------------------------------------+
40-
| nodejs_security_wg | NPM-<ID> |
41-
+-------------------------------+--------------------------------------------------------------+
42-
| nvd_importer_v2 | CVE ID of the record |
43-
+-------------------------------+--------------------------------------------------------------+
44-
| openssl_importer_v2 | CVE ID of the record |
45-
+-------------------------------+--------------------------------------------------------------+
46-
| oss_fuzz_importer_v2 | ID of the OSV record |
47-
+-------------------------------+--------------------------------------------------------------+
48-
| postgresql_importer_v2 | CVE ID of the record |
49-
+-------------------------------+--------------------------------------------------------------+
50-
| project-kb-msr-2019_v2 | Vulnerability ID of the record |
51-
+-------------------------------+--------------------------------------------------------------+
52-
| project-kb-statements_v2 | Vulnerability ID of the record |
53-
+-------------------------------+--------------------------------------------------------------+
54-
| pypa_importer_v2 | ID of the OSV record |
55-
+-------------------------------+--------------------------------------------------------------+
56-
| pysec_importer_v2 | ID of the OSV record |
57-
+-------------------------------+--------------------------------------------------------------+
58-
| redhat_importer_v2 | RHSA ID of the record |
59-
+-------------------------------+--------------------------------------------------------------+
60-
| retiredotnet_importer_v2 | retiredotnet-{file_id} |
61-
+-------------------------------+--------------------------------------------------------------+
62-
| ruby_importer_v2 | {file_id} |
63-
+-------------------------------+--------------------------------------------------------------+
64-
| suse_importer_v2 | CVE ID of the record |
65-
+-------------------------------+--------------------------------------------------------------+
66-
| ubuntu_osv_importer_v2 | ID of the OSV record |
67-
+-------------------------------+--------------------------------------------------------------+
68-
| vulnrichment_importer_v2 | CVE ID of the record |
69-
+-------------------------------+--------------------------------------------------------------+
70-
| xen_importer_v2 | XSA-<ID> |
71-
+-------------------------------+--------------------------------------------------------------+
1+
.. list-table:: Pipeline AVID Mapping
2+
:header-rows: 1
3+
:widths: 35 65
4+
5+
* - pipeline name
6+
- AVID
7+
* - alpine_linux_importer_v2
8+
- {package_name}/{distroversion}/{version}/{vulnerability_id}
9+
* - aosp_dataset_fix_commits
10+
- CVE ID of the record
11+
* - apache_httpd_importer_v2
12+
- CVE ID of the record
13+
* - apache_kafka_importer_v2
14+
- CVE ID of the record
15+
* - apache_tomcat_importer_v2
16+
- {page_id}/{cve_id}
17+
* - archlinux_importer_v2
18+
- AVG ID of the record
19+
* - curl_importer_v2
20+
- CURL-CVE ID of the record
21+
* - debian_importer_v2
22+
- {package_name}/{debian_record_id}
23+
* - elixir_security_importer_v2
24+
- {package_name}/{file_id}
25+
* - epss_importer_v2
26+
- CVE ID of the record
27+
* - fireeye_importer_v2
28+
- {file_id}
29+
* - gentoo_importer_v2
30+
- GLSA ID of the record
31+
* - github_osv_importer_v2
32+
- ID of the OSV record
33+
* - gitlab_importer_v2
34+
- Identifier of the GitLab community advisory record
35+
* - istio_importer_v2
36+
- ISTIO-SECURITY-<ID>
37+
* - mattermost_importer_v2
38+
- MMSA-<ID>
39+
* - mozilla_importer_v2
40+
- MFSA-<ID>
41+
* - nginx_importer_v2
42+
- First alias of the record
43+
* - nodejs_security_wg
44+
- NPM-<ID>
45+
* - nvd_importer_v2
46+
- CVE ID of the record
47+
* - openssl_importer_v2
48+
- CVE ID of the record
49+
* - oss_fuzz_importer_v2
50+
- ID of the OSV record
51+
* - postgresql_importer_v2
52+
- CVE ID of the record
53+
* - project-kb-msr-2019_v2
54+
- Vulnerability ID of the record
55+
* - project-kb-statements_v2
56+
- Vulnerability ID of the record
57+
* - pypa_importer_v2
58+
- ID of the OSV record
59+
* - pysec_importer_v2
60+
- ID of the OSV record
61+
* - redhat_importer_v2
62+
- RHSA ID of the record
63+
* - retiredotnet_importer_v2
64+
- retiredotnet-{file_id}
65+
* - ruby_importer_v2
66+
- {file_id}
67+
* - suse_importer_v2
68+
- CVE ID of the record
69+
* - ubuntu_osv_importer_v2
70+
- ID of the OSV record
71+
* - vulnrichment_importer_v2
72+
- CVE ID of the record
73+
* - xen_importer_v2
74+
- XSA-<ID>

‎vulnerabilities/pipelines/v2_importers/archlinux_importer.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -98,7 +98,7 @@ def parse_advisory(self, record) -> AdvisoryDataV2:
9898

9999
severities = [
100100
VulnerabilitySeverity(
101-
system=severity_systems.GENERIC,
101+
system=severity_systems.ARCHLINUX,
102102
value=severity,
103103
url="https://security.archlinux.org/{avg_name}.json",
104104
)

‎vulnerabilities/severity_systems.py‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -169,6 +169,14 @@ def get(self, scoring_elements: str) -> dict:
169169
"Low",
170170
]
171171

172+
ARCHLINUX.choices = [
173+
"Critical",
174+
"High",
175+
"Medium",
176+
"Low",
177+
"Very Low",
178+
]
179+
172180
# This is essentially identical to apache_http except for the addition of the "High" score,
173181
# which seems to be used interchangeably for "Important".
174182
APACHE_TOMCAT = ScoringSystem(

0 commit comments

Comments
 (0)