Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Collect xen #464

Merged
merged 34 commits into from
Feb 8, 2022
Merged

Collect xen #464

merged 34 commits into from
Feb 8, 2022

Commits on Apr 28, 2021

  1. Merge pull request #2 from nexB/main 

    Pulling changes
    @Pushpit07
    Pushpit07 authored Apr 28, 2021
    Configuration menu
    Copy the full SHA
    c585f02 View commit details
    Browse the repository at this point in the history

Commits on May 22, 2021

  1. Merge branch 'nexB:main' into main

    @Pushpit07
    Pushpit07 committed May 22, 2021
    Configuration menu
    Copy the full SHA
    a2e4487 View commit details
    Browse the repository at this point in the history

Commits on May 27, 2021

  1. Added code to import Xen 

    Signed-off-by: Pushpit <pushpit07@gmail.com>
    @Pushpit07
    Pushpit07 committed May 27, 2021
    Configuration menu
    Copy the full SHA
    46aacf1 View commit details
    Browse the repository at this point in the history

Commits on Jun 20, 2021

  1. Merge branch 'main' into collect_xen

    @pombredanne
    pombredanne authored Jun 20, 2021
    Configuration menu
    Copy the full SHA
    c5118c9 View commit details
    Browse the repository at this point in the history

Commits on Jul 25, 2021

  1. Merge branch 'main' into collect_xen

    @Pushpit07
    Pushpit07 authored Jul 25, 2021
    Configuration menu
    Copy the full SHA
    3f776ff View commit details
    Browse the repository at this point in the history

  2. Update importer_yielder.py

    @Pushpit07
    Pushpit07 authored Jul 25, 2021
    Configuration menu
    Copy the full SHA
    307ead3 View commit details
    Browse the repository at this point in the history

  3. Added xen license info 

    Signed-off-by: Pushpit <pushpit07@gmail.com>
    @Pushpit07
    Pushpit07 committed Jul 25, 2021
    Configuration menu
    Copy the full SHA
    7b828ea View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2021

  1. helper: split_markdown_front_matter 

    helper for istio and mozilla importers

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    73a884f View commit details
    Browse the repository at this point in the history

  2. black -l 100 

    Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    a1752bd View commit details
    Browse the repository at this point in the history

  3. Use split_markdown_front_matter helper in istio 

    also, sort imports

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    614e0f3 View commit details
    Browse the repository at this point in the history

  4. Use a more obvious version and reorder imports 

    Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    d872763 View commit details
    Browse the repository at this point in the history

  5. Update according to first review 

    Better documentation and more readable function structrue
review: aboutcode-org#443 (review)

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    f4ca861 View commit details
    Browse the repository at this point in the history

  6. Comment regarding raw docstring and sort imports 

    Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    617700a View commit details
    Browse the repository at this point in the history

  7. Remove added_advisories for updated_advisories 

    Internally, the difference between both has faded and updated_advisories
is preferred.

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    0f6eece View commit details
    Browse the repository at this point in the history

  8. Speed up test_upstream 

    Earlier, one batch of advisories was requested from updated_advisories
method of the respective importers. This was inefficient as not all
importers respect batching internally. Eventually, we wish to eliminate
batches as well ( # 338 ).
Now, the updated_advisories method of each importer is expected to
create at least one Advisory object. If it does so, the importer is
marked working.
This brings major performance improvement. It is a necessity to improve
this test as GitHub only allows 6 hrs of workflow time.
Before: ~6hrs, now ~9 minutes

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    b891459 View commit details
    Browse the repository at this point in the history

  9. 🙈 Ignore legacy pypi package versions in github importer 

    Signed-off-by: GitHub <noreply@github.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    1f2cb59 View commit details
    Browse the repository at this point in the history

  10. Add basic implementation for time travel in imports 

    Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    1f8ef6b View commit details
    Browse the repository at this point in the history

  11. Use web scraping to obtain github tags 

    Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    e847303 View commit details
    Browse the repository at this point in the history

  12. Time travel for githubtags, maven version api importers 

    Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    ba9051d View commit details
    Browse the repository at this point in the history

  13. Fix tests 

    Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    9842367 View commit details
    Browse the repository at this point in the history

  14. Use class for returning versions partitioned by cutoff time 

    Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    0dccf22 View commit details
    Browse the repository at this point in the history

  15. Make review changes 

    Signed-off-by: Shivam Sandbhor <shivam@crowdsec.net>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    f7dc3e6 View commit details
    Browse the repository at this point in the history

  16. Refactor package_manangers 

    Use uniform names and prototypes for `fetch` function.
Remove unnecessary checks. Re-use sessions

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    72a84bc View commit details
    Browse the repository at this point in the history

  17. Move load_api to parent class and refactor imports 

    The code for `load_api` was repetitive and used in all subclasses of
VersionAPI, it is better suited in the parent class. `fetch` method is
also now consistent and defined as an abstract method in the base class.
Python ABC is not used as different implementations of `load_api` and
`fetch` are allowed as done in DebianVersionAPI

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    bece29b View commit details
    Browse the repository at this point in the history

  18. Remove misleading frozen dataclass 

    Signed-off-by: Shivam Sandbhor <shivam@crowdsec.net>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    80e3cf0 View commit details
    Browse the repository at this point in the history

  19. Fix npm importer date manipulation 

    Signed-off-by: Shivam Sandbhor <shivam@crowdsec.net>
    @sbs2001 @Pushpit07
    sbs2001 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    9d359f2 View commit details
    Browse the repository at this point in the history

  20. Fix recursion in GitHubTagsAPI 

    A minor bug was introduced by 775aa1d which was crashing the nginx
importer.

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    047398e View commit details
    Browse the repository at this point in the history

  21. Update importers to handle VersionResponse 

    Recent time travel heuristics need published date of versions, thus
Version dataclass was created. Some of the importers got bugged by this
new system and were crashing. This fix is a part of # 467

Importers bugged:
	- nginx
	- debian_oval
	- ubuntu

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14 @Pushpit07
    Hritik14 authored and Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    9053ba9 View commit details
    Browse the repository at this point in the history

  22. Update importer_yielder.py 

    Signed-off-by: Pushpit <pushpit07@gmail.com>
    @Pushpit07
    Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    1f3fdef View commit details
    Browse the repository at this point in the history

  23. Added xen license info 

    Signed-off-by: Pushpit <pushpit07@gmail.com>
    @Pushpit07
    Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    5774649 View commit details
    Browse the repository at this point in the history

  24. Merge branch 'collect_xen' of https://github.com/Pushpit07/vulnerable… 

    …code into collect_xen

Pulling changes

Signed-off-by: Pushpit <pushpit07@gmail.com>

Signing-off
    @Pushpit07
    Pushpit07 committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    62c2b74 View commit details
    Browse the repository at this point in the history

Commits on Feb 7, 2022

  1. Merge branch 'main' into collect_xen 

    Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14
    Hritik14 committed Feb 7, 2022
    Configuration menu
    Copy the full SHA
    bd18abe View commit details
    Browse the repository at this point in the history

Commits on Feb 8, 2022

  1. Merge branch 'main' of github.com:nexb/vulnerablecode into collect_xen

    @Hritik14
    Hritik14 committed Feb 8, 2022
    Configuration menu
    Copy the full SHA
    8298b4c View commit details
    Browse the repository at this point in the history

  2. Rename DataSource to Improver, blackify, ignore tests 

    This is required to merge the PR to main for a clean slate for new
contributions for importer-improver migration

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
    @Hritik14
    Hritik14 committed Feb 8, 2022
    Configuration menu
    Copy the full SHA
    6ef62fa View commit details
    Browse the repository at this point in the history