Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Software - Improve software and CVE lookup performance #228

Closed
7h3Rabbit opened this issue Sep 12, 2023 · 2 comments
Closed

Software - Improve software and CVE lookup performance #228

7h3Rabbit opened this issue Sep 12, 2023 · 2 comments
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@7h3Rabbit
Copy link
Collaborator

No description provided.

@7h3Rabbit 7h3Rabbit added the enhancement New feature or request label Sep 12, 2023
@7h3Rabbit 7h3Rabbit added this to the Next milestone milestone Sep 12, 2023
@7h3Rabbit 7h3Rabbit self-assigned this Sep 12, 2023
7h3Rabbit added a commit that referenced this issue Oct 1, 2023
start of splitting out software and CVE lookup, #228
@7h3Rabbit
Copy link
Collaborator Author

This issue has the following consequences:

  • The software test will find more software and rate these (can affect both up and down)
  • The rating for vulnerabilities will change, both in terms of weighting and what it finds.
  • The software test will give grades for whether the software has passed end of life or if the GitHub repo has been set as archived.
  • Webperf-core will require fewer external dependencies to run the Software test locally
  • Webperf-core will not go against a live database to find vulnerabilities, instead a list will be updated in the repo on the 14th and 28th of each month.
  • Webperf-core will not spend time finding vulnerabilities for software it does not recognize.
  • Webperf-core will not spend time finding more info about software it does not recognize
    If you can't wait for the above or need to add software you don't want to tell about, you can run update_software.py yourself to update, but you must add the GitHub key as the number of calls is otherwise too many.
  • Software that is found but not recognized will be added to the file software-unknown-sources.json, if this is created when it is running on your site, please review it and consider submitting it to us for better support.
  • Software found and referenced to GitHub are added to software-sources.json, review it and consider submitting it to us if new lines are added for better support
  • The software test can be run completely locally, it no longer has any dependencies to external api/websites (which it had before)
  • Cache handling has been rewritten and performance optimized for tests where several different websites are tested, for example all municipalities. Now grouped by domain name (also makes it easier to delete individual domains cache)

@7h3Rabbit
Copy link
Collaborator Author

merge and run ;)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant