[GSOC23] - B - Enable the downloading and synchronization of OVAL data#7509

Merged

deneb-alpha merged 64 commits intouyuni-project:masterfrom HoussemNasri:oval-downloader

Sep 5, 2024

+1,676-89

Commits on Sep 5, 2024

Read OVAL data sources from a configuration file

HoussemNasri
authored and
parlt91
committed
Implement the downloading of OVALs based on the config file

HoussemNasri
authored and
parlt91
committed
Add taskomatic task for syncing OVAL data

HoussemNasri
authored and
parlt91
committed
Indicate in UI when vulnerability scan was based on OVAL or Channels data

HoussemNasri
authored and
parlt91
committed
Add Leap 15.2 OVAL sources

HoussemNasri
authored and
parlt91
committed
Deploy oval.config.json to /usr/share/susemanager/scc/

HoussemNasri
authored and
parlt91
committed
Add support for SLE Micro OVAL-based CVE auditing

HoussemNasri
authored and
parlt91
committed
Add support for openSUSE Micro OVAL-based CVE auditing

HoussemNasri
authored and
parlt91
committed
Add SLE and Leap Micro OVAL sources

HoussemNasri
authored and
parlt91
committed
Synchronize OVAL data only for products used by registered clients

HoussemNasri
authored and
parlt91
committed
Log the products eligible for OVAL synchronization

HoussemNasri
authored and
parlt91
committed
Translate oval sync task related strings

HoussemNasri
authored and
parlt91
committed
Test OVAL sources

HoussemNasri
authored and
parlt91
committed
Use Leap in oval.config.json

HoussemNasri
authored and
parlt91
committed
Use proper logging when syncing OVAL data

HoussemNasri
authored and
parlt91
committed
Rename 'openSUSE_LEAP_MICRO' to 'LEAP_MICRO'

HoussemNasri
authored and
parlt91
committed
Document the OVAL downloader component classes

HoussemNasri
authored and
parlt91
committed
Refactor and fix checkstyle

HoussemNasri
authored and
parlt91
committed
Use format specifiers instead of concatenation when logging

HoussemNasri
authored and
parlt91
committed
Remove unused methods

HoussemNasri
authored and
parlt91
committed
Refactor Server#toOVALProduct

HoussemNasri
authored and
parlt91
committed
Add changelogs

HoussemNasri
authored and
parlt91
committed
Revert "Use channel data until full OVAL implementation is ready"

HoussemNasri
authored and
parlt91
committed
Copyright (c) 2024

HoussemNasri
authored and
parlt91
committed
Prevent synchronizing OVAL data for the same product twice

HoussemNasri
authored and
parlt91
committed
Avoid fetching all servers to detect the set of operating systems they use

HoussemNasri
authored and
parlt91
committed
Log the starting and ending of the OVAL syncing task

HoussemNasri
authored and
parlt91
committed
Rephrase comment in OVALCleaner

HoussemNasri
authored and
parlt91
committed
Fix typo in oval.config.json

HoussemNasri
authored and
parlt91
committed
Refactor OVALDownloader

HoussemNasri
authored and
parlt91
committed
Refactor to avoid code duplication

HoussemNasri
authored and
parlt91
committed
Clarify comments

HoussemNasri
authored and
parlt91
committed
Increase connection and read timeouts while downloading OVAL data

HoussemNasri
authored and
parlt91
committed
Store downloaded OVAL files in a cache directory

HoussemNasri
authored and
parlt91
committed
Move the toOVALProduct method to OsReleasePair

HoussemNasri
authored and
parlt91
committed
Undo OVAL support for ubuntu

HoussemNasri
authored and
parlt91
committed
Extract the cve from <cve> tag in OVAL files

HoussemNasri
authored and
parlt91
committed
Display the list of data sources used to scan each client server

HoussemNasri
authored and
parlt91
committed
Change regex to not be vulnerable to polynomial runtime due to backtracking

HoussemNasri
authored and
parlt91
committed
Introduce UI warning for potential inaccuracies in CVE audit results

HoussemNasri
authored and
parlt91
committed
Implement the check for existence of erratas in server CVE channels

HoussemNasri
authored and
parlt91
committed
Delete cveaudit.less

HoussemNasri
authored and
parlt91
committed
Remove the "Scan Data" column from the CVE audit page

HoussemNasri
authored and
parlt91
committed
Translate strings

HoussemNasri
authored and
parlt91
committed
Log error on invalid CVE scan data sources

HoussemNasri
authored and
parlt91
committed
Insert missing data related to the sync OVAL taskomatic task

HoussemNasri
authored and
parlt91
committed
Rephrase CVE auditing related UI messages

authored and
parlt91
committed
Fix bug where the system name in the CVE auditing table results not displayed

HoussemNasri
authored and
parlt91
committed
Introduce an "unknown" patch status to be returned when OVAL and Channels metadata not synced

HoussemNasri
authored and
parlt91
committed
Introduce a shell script that synchronizes the oval.config.json file used for testing

HoussemNasri
authored and
parlt91
committed
Add missing OVAL data sources

HoussemNasri
authored and
parlt91
committed
Move OVAL config file to a more appropriate directory

HoussemNasri
authored and
parlt91
committed
Configure OVAL for SLE/Leap Micro 6.0 and Leap 15.6

HoussemNasri
authored and
parlt91
committed
Fix linter

HoussemNasri
authored and
parlt91
committed
Frontend lint

HoussemNasri
authored and
parlt91
committed
Clear previous OVAL metadata for platform before inserting the newer data.

HoussemNasri
authored and
parlt91
committed
Add an configuration option to enable/disable OVAL metadata usage in CVE auditing

HoussemNasri
authored and
parlt91
committed
Correct the location of the OVAL config file in RPM spec

HoussemNasri
authored and
parlt91
committed
Fix sles and sled OVAL product matching

HoussemNasri
authored and
parlt91
committed
Fix OVAL's release package regex

HoussemNasri
authored and
parlt91
committed
Relocate database migration script

HoussemNasri
authored and
parlt91
committed
Continue syncing other products if OVAL data syncing fails for one

HoussemNasri
authored and
parlt91
committed
Change string#replace by string#replaceFirst

HoussemNasri
authored and
parlt91
committed
Move schema migration to current dir
parlt91
committed