Skip to content

How can we pass useful data from importer to improver? #994

Open
@ziadhany

Description

@ziadhany

For example ruby importer/improver: #799
https://github.com/rubysec/ruby-advisory-db/blob/master/rubies/ruby/CVE-2022-28738.yml

patched_versions = record.get("patched_versions", []) # [ ~> 3.0.4 , >= 3.1.2 ]
fixed_version_ranges = [GemVersionRange.from_native(v) for v in patched_versions] # type: List[VersionRange]

unaffected_versions = record.get("unaffected_versions", []) # [ ~> 2.6.0 ,  ~> 2.7.0]
unaffected_versions_ranges = [GemVersionRange.from_native(v) for v in unaffected_versions]# type: List[VersionRange]

affected_packages = AffectedPackage(purl,affected_version_range= ,fixed_version=) # How can we fill this?

AffectedPackage type should be :
affected_version_range: VersionRange | None
fixed_version: Version | None

To pass affected_version_range and/or fixed_version as a argument for AffectedPackage
it is required to use RubyVersionAPI() but we should use RubyVersionAPI() only at improver

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions