Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deprecate yaml format for SUSE importer and ingest data in CSAF, OVAL or CVRF format #1079

Open
TG1999 opened this issue Jan 12, 2023 · 1 comment
Open

Deprecate yaml format for SUSE importer and ingest data in CSAF, OVAL or CVRF format #1079

TG1999 opened this issue Jan 12, 2023 · 1 comment
Assignees
@johnmhoran
Labels
Data collection

Comments

@TG1999
Copy link
Contributor

TG1999 commented Jan 12, 2023 •
edited
Loading

This reply is from Marcus Meissner from Suse

Hi,

FWIW.  the backports data in the yaml directory is no longer generated
and I have now deleted the data. Our PM only wishes that we publish data
in standard formats.

As Alexander writes, please use our OVAL, CVRF or CSAF data preferably.

The YAML file with the CVSS scores will stay however for ease of
consumption.

Ciao, Marcus

Suse has dropped the support for backport data from the YAML folder, so the suse-backport importer that we were migrating will not be able to import any data. We will drop this importer and write a new importer post-migration for ingesting data from OVAL, CVRF, or CSAF data format.
@TG1999 TG1999 added this to the v33.0.0 milestone Jan 13, 2023
@TG1999 TG1999 modified the milestones: v33.0.0, v34.0.0 Jan 13, 2023
@johnmhoran johnmhoran self-assigned this Jan 18, 2023
johnmhoran added a commit that referenced this issue Jan 19, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
e8b59f0 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
@johnmhoran johnmhoran mentioned this issue Jan 19, 2023
Merged
johnmhoran added a commit that referenced this issue Jan 20, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
5ca3c85 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 20, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
6ecc004 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 20, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
d02f542 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 24, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
7fad3e1 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 24, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
5e43db1 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 24, 2023
@johnmhoran
Commit latest parsing changes #1079
ddff4d0 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 24, 2023
@johnmhoran
Update tests #1079
6714b5a 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
41a5aff 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
baf65b3 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Commit latest parsing changes #1079
048ea31 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Update tests #1079
413857a 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Add note re loop through list of aliases #1079
69e5115 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Jan 27, 2023
@johnmhoran
Work on alias/CVE loop #1079
44aeb6a 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
b92997c 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
d7375a8 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Commit latest parsing changes #1079
d91ca49 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Update tests #1079
a7abfa8 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Add note re loop through list of aliases #1079
5cd4c36 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Work on alias/CVE loop #1079
d98dfe3 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 2, 2023
@johnmhoran
Add OVAL parsing test #1079
3786195 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 8, 2023
@johnmhoran
Refactor OVAL-relared code, fix failing tests #1079
10bd0bd 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 8, 2023
@johnmhoran
Create suse_oval.py and related test files #1079
ba8834c 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 8, 2023
@johnmhoran
Explore OvalParser() parsing process #1079
de44674 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 13, 2023
@johnmhoran
Refactor OVAL-relared code, fix failing tests #1079
f0c5247 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 13, 2023
@johnmhoran
Delete unneeded large XML files #1079
c8c0f52 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 13, 2023
@johnmhoran
Filter for name-affected.xml files, check CVE prefixes #1079
a5877cc 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Feb 13, 2023
@johnmhoran
Refactor OvalParser(), add and update tests #1079
8b86e51 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
@tschmidtb51
Copy link

The CSAF files for Suse are avaiable at: https://ftp.suse.com/pub/projects/security/csaf/

@TG1999 TG1999 removed this from the v33.0.0 milestone Aug 15, 2023
johnmhoran added a commit that referenced this issue Dec 6, 2023
@johnmhoran
Merge branch 'main' into 1079-create-suse-oval-importer #1079
b33646c 
Reference: #1079

Signed-off-by: John M. Horan johnmhoran@gmail.com
johnmhoran added a commit that referenced this issue Dec 6, 2023
@johnmhoran
Refactor tests and test files, freeze Black version #1079
8cc94a0 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Create suse_oval.py and related test files #1079
660bba5 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Explore OvalParser() parsing process #1079
cc142a7 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Commit latest parsing changes #1079
bc80746 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Update tests #1079
2422fab 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Add note re loop through list of aliases #1079
30901c7 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Work on alias/CVE loop #1079
4cd575f 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Add OVAL parsing test #1079
142efe3 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Refactor OVAL-relared code, fix failing tests #1079
d4267de 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Delete unneeded large XML files #1079
385de0e 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Filter for name-affected.xml files, check CVE prefixes #1079
ea997e2 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Refactor OvalParser(), add and update tests #1079
c2304f7 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 pushed a commit that referenced this issue Dec 7, 2023
@johnmhoran @TG1999
Refactor tests and test files, freeze Black version #1079
4b07dbd 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 13, 2023
@johnmhoran
Merge branch '1079-create-suse-oval-importer' of github.com:nexB/vuln…
23c27ec 
…erablecode into 1079-create-suse-oval-importer #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 13, 2023
@johnmhoran
Merge branch '1079-create-suse-oval-importer' of github.com:nexB/vuln…
6ce72b9 
…erablecode into 1079-create-suse-oval-importer #1079

Reference: #1079

Signed-off-by: John M. Horan johnmhoran@gmail.com
johnmhoran added a commit that referenced this issue Dec 13, 2023
@johnmhoran
Merge branch 'main' into 1079-create-suse-oval-importer #1079
d674f20 
Reference: #1079

Signed-off-by: John M. Horan johnmhoran@gmail.com
johnmhoran added a commit that referenced this issue Dec 13, 2023
@johnmhoran
Replace 'list()' with 'sorted()' #1079
d880e51 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 24, 2023
@johnmhoran
Modify OvalElement class __lt__ method and create test #1079
15fddb6 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 24, 2023
@johnmhoran
Merge branch 'main' into 1079-create-suse-oval-importer #1079
9e773ba 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 27, 2023
@johnmhoran
Merge branch 'main' into 1079-create-suse-oval-importer #1079
562c832 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 27, 2023
@johnmhoran
Add 'url' field to expected JSON test output #1079
f76da3c 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
johnmhoran added a commit that referenced this issue Dec 28, 2023
@johnmhoran
Update __lt__ method and related test #1079
2c8cfac 
Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
TG1999 added a commit that referenced this issue Dec 29, 2023
@johnmhoran @TG1999
Create SUSE OVAL importer (#1085)
02e3fae 
* Create suse_oval.py and related test files #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Explore OvalParser() parsing process #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Commit latest parsing changes #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Update tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add note re loop through list of aliases #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Work on alias/CVE loop #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add OVAL parsing test #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor OVAL-relared code, fix failing tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Delete unneeded large XML files #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Filter for name-affected.xml files, check CVE prefixes #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor OvalParser(), add and update tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor tests and test files, freeze Black version #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Create suse_oval.py and related test files #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Explore OvalParser() parsing process #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Commit latest parsing changes #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Update tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add note re loop through list of aliases #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Work on alias/CVE loop #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add OVAL parsing test #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor OVAL-relared code, fix failing tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Delete unneeded large XML files #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Filter for name-affected.xml files, check CVE prefixes #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor OvalParser(), add and update tests #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Refactor tests and test files, freeze Black version #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Update setup.cfg

* Replace 'list()' with 'sorted()' #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Modify OvalElement class __lt__ method and create test #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Add 'url' field to expected JSON test output #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

* Update __lt__ method and related test #1079

Reference: #1079

Signed-off-by: John M. Horan <johnmhoran@gmail.com>

---------

Signed-off-by: John M. Horan <johnmhoran@gmail.com>
Signed-off-by: John M. Horan johnmhoran@gmail.com
Co-authored-by: Tushar Goel <34160672+TG1999@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@johnmhoran johnmhoran

Labels
Data collection
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@johnmhoran @TG1999 @tschmidtb51