ingest withdrawn status of advisories from GitHub

NuGet · Jun 10, 2021 · 4cb4bed · 4cb4bed
1 parent 17d0302
commit 4cb4bed
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/src/GitHubVulnerabilities2Db/Collector/AdvisoryQueryBuilder.cs b/src/GitHubVulnerabilities2Db/Collector/AdvisoryQueryBuilder.cs
@@ -23,6 +23,7 @@ public string CreateSecurityAdvisoriesQuery(DateTimeOffset? updatedSince = null,
         databaseId
         permalink
         severity
+        withdrawnAt
         updatedAt
         " + CreateVulnerabilitiesConnectionQuery() + @"
       }

diff --git a/src/GitHubVulnerabilities2Db/GraphQL/SecurityVulnerability.cs b/src/GitHubVulnerabilities2Db/GraphQL/SecurityVulnerability.cs
@@ -13,6 +13,7 @@ public class SecurityVulnerability : INode
         public SecurityVulnerabilityPackage Package { get; set; }
         public string VulnerableVersionRange { get; set; }
         public SecurityVulnerabilityPackageVersion FirstPatchedVersion { get; set; }
+        public DateTimeOffset? WithdrawnAt { get; set; }
         public DateTimeOffset UpdatedAt { get; set; }
         public SecurityAdvisory Advisory { get; set; }
     }

diff --git a/tests/GitHubVulnerabilities2Db.Facts/AdvisoryIngestorFacts.cs b/tests/GitHubVulnerabilities2Db.Facts/AdvisoryIngestorFacts.cs
@@ -52,6 +52,7 @@ public async Task IngestsAdvisoryWithoutVulnerability(bool withdrawn)
                         Assert.Equal(advisory.DatabaseId, vulnerability.GitHubDatabaseKey);
                         Assert.Equal(PackageVulnerabilitySeverity.Moderate, vulnerability.Severity);
                         Assert.Equal(advisory.Permalink, vulnerability.AdvisoryUrl);
+                        Assert.Equal(withdrawn, advisory.WithdrawnAt != null);
                     })
                     .Returns(Task.CompletedTask)
                     .Verifiable();