Skip to content

Conversation

@pombredanne
Copy link
Member

This PR

  • improves how we handle NVD data
  • refactor the purl2cpe script
  • align some key internal names with UI and API (affected and fixed)
  • uses querysets as model managers and streamline views

Signed-off-by: Philippe Ombredanne pombredanne@nexb.com

pombredanne and others added 23 commits November 8, 2022 22:36
Setting VULNERABLECODEIO_REQUIRE_AUTHENTICATION will require auth
with an API key

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
This is handy for data browsing

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Also add minimal API auth and configuration documentation

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
* Create a new ApiUser proxy model to create a minimal admin.
* Streamline code and validate that a username is a valid email.
* Update the management command accordingly to share common code

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
* Use shared footer
* Move navbar to base template to avoid duplication

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
This will help generate an Open API documentation now that we do not
have CDN issues anymore with:
tfranzel/drf-spectacular#389

Referenced-by: #454
Thanks-you-to: T. Franzel @tfranzel
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
This is no longer needed as the OpenAPI schema is available directly
though drf-spectacular

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
And streamline urls

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Override the swagger UI template
Format and improve settings and ruls.py

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Prefer underscore to dash

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
* Use proper queryset instead of duplicated code.
* Update Package and Vulnerability querysets and use these
  This streamlines some of the core naming and duplication issues
* Refactor NVD importer core logic around a CveItem object
* Use new querysets rather than refetching from the NVD
* Add license and license notice
* Update documentation and tests accordingly

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
@pombredanne pombredanne requested a review from TG1999 November 8, 2022 22:45
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
@pombredanne
Copy link
Member Author

All green. Merging!

@pombredanne pombredanne merged commit d4d2672 into main Nov 8, 2022
@pombredanne pombredanne deleted the nvd-improvements branch November 8, 2022 22:56
johnmhoran added a commit that referenced this pull request Nov 15, 2023
Reference: #977

Note: I just noticed that I named the branch with 997 but the issue is 977.

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this pull request Nov 21, 2023
* Widen the RTD page #997

Reference: #977

Note: I just noticed that I named the branch with 997 but the issue is 977.

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add width, margin and padding adjustments for mobile displays <= 768px #977

Reference: #977

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

---------

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants