Skip to content

Improve NVD handling and more#997

Merged
pombredanne merged 27 commits intomainfrom
nvd-improvements
Nov 8, 2022
Merged

Improve NVD handling and more#997
pombredanne merged 27 commits intomainfrom
nvd-improvements

Conversation

@pombredanne
Copy link
Member

This PR

  • improves how we handle NVD data
  • refactor the purl2cpe script
  • align some key internal names with UI and API (affected and fixed)
  • uses querysets as model managers and streamline views

Signed-off-by: Philippe Ombredanne [email protected]

pombredanne and others added 23 commits November 8, 2022 22:36
Setting VULNERABLECODEIO_REQUIRE_AUTHENTICATION will require auth
with an API key

Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
This is handy for data browsing

Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Also add minimal API auth and configuration documentation

Signed-off-by: Philippe Ombredanne <[email protected]>
* Create a new ApiUser proxy model to create a minimal admin.
* Streamline code and validate that a username is a valid email.
* Update the management command accordingly to share common code

Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
* Use shared footer
* Move navbar to base template to avoid duplication

Signed-off-by: Philippe Ombredanne <[email protected]>
This will help generate an Open API documentation now that we do not
have CDN issues anymore with:
tfranzel/drf-spectacular#389

Referenced-by: #454
Thanks-you-to: T. Franzel @tfranzel
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
This is no longer needed as the OpenAPI schema is available directly
though drf-spectacular

Signed-off-by: Philippe Ombredanne <[email protected]>
And streamline urls

Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Override the swagger UI template
Format and improve settings and ruls.py

Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Tushar Goel <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Prefer underscore to dash

Signed-off-by: Philippe Ombredanne <[email protected]>
* Use proper queryset instead of duplicated code.
* Update Package and Vulnerability querysets and use these
  This streamlines some of the core naming and duplication issues
* Refactor NVD importer core logic around a CveItem object
* Use new querysets rather than refetching from the NVD
* Add license and license notice
* Update documentation and tests accordingly

Signed-off-by: Philippe Ombredanne <[email protected]>
@pombredanne pombredanne requested a review from TG1999 November 8, 2022 22:45
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
@pombredanne
Copy link
Member Author

All green. Merging!

@pombredanne pombredanne merged commit d4d2672 into main Nov 8, 2022
@pombredanne pombredanne deleted the nvd-improvements branch November 8, 2022 22:56
johnmhoran added a commit that referenced this pull request Nov 15, 2023
Reference: #977

Note: I just noticed that I named the branch with 997 but the issue is 977.

Signed-off-by: John M. Horan <[email protected]>
TG1999 pushed a commit that referenced this pull request Nov 21, 2023
* Widen the RTD page #997

Reference: #977

Note: I just noticed that I named the branch with 997 but the issue is 977.

Signed-off-by: John M. Horan <[email protected]>

* Add width, margin and padding adjustments for mobile displays <= 768px #977

Reference: #977

Signed-off-by: John M. Horan <[email protected]>

---------

Signed-off-by: John M. Horan <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants