Skip to content

Sync Forked repo#7

Merged
AmitGupta7580 merged 41 commits intoAmitGupta7580:mainfrom
aboutcode-org:main
Apr 4, 2021
Merged

Sync Forked repo#7
AmitGupta7580 merged 41 commits intoAmitGupta7580:mainfrom
aboutcode-org:main

Conversation

@AmitGupta7580
Copy link
Owner

No description provided.

dependabot bot and others added 30 commits March 19, 2021 21:55
Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.11.0 to 3.11.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.11.0...3.11.2)

Signed-off-by: dependabot[bot] <support@github.com>
- Update debian importer's schema validation
- Add tests for msr2019 importer.

Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](yaml/pyyaml@5.3.1...5.4)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
…3.11.2

Bump djangorestframework from 3.11.0 to 3.11.2
Bumps [lxml](https://github.com/lxml/lxml) from 4.6.2 to 4.6.3.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-4.6.2...lxml-4.6.3)

Signed-off-by: dependabot[bot] <support@github.com>
- Now the class handles paginated results
- Added a detailed FIXME comment about an edge case

Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
I hope no review is required :p

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
Signed-off-by: Rolf Schröder <rolf.schr@gmail.com>
Signed-off-by: Pierre Tardy <pierre.tardy@renault.com>
If there is an operational error on one of the importer, it is better to still run the other importers

Signed-off-by: Pierre Tardy <pierre.tardy@renault.com>
This allows to print stack traces on the stdout

Best practice would be to integrate with sentry, but at least print the stack trace is helpful when trying to deploy this

Signed-off-by: Pierre Tardy <pierre.tardy@renault.com>
Signed-off-by: Pierre Tardy <pierre.tardy@renault.com>
Signed-off-by: Pierre Tardy <pierre.tardy@renault.com>
Bumps [lxml](https://github.com/lxml/lxml) from 4.6.2 to 4.6.3.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-4.6.2...lxml-4.6.3)

Signed-off-by: dependabot[bot] <support@github.com>
* Fix #394

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
enable aiohttp client to trust environement for proxy
import: continue upon failure
Misc fixes for deploying vulnerablecode on a container platform
enable configuration of allowed host
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
Hritik14 and others added 11 commits April 2, 2021 01:08
Introduced and used a helper function for retries on 5xx errors. This is
important and some servers like bugzilla.redhat.com return 502 Proxy Error
which was the cause of #398

A ticket has been raised in RedHat here https://redhat.service-now.com/help?id=rh_ticket&table=sc_req_item&sys_id=278239541b1ba010477e43fccd4bcb4a

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
This is mentioned in the NOTE of "2.1 List all CVRFs" of
https://access.redhat.com/documentation/en-us/red_hat_security_data_api/1.0/html/red_hat_security_data_api/cvrf

Such a case would lead to a crash before this commit.
Eg: https://access.redhat.com/hydra/rest/securitydata/cvrf/RHSA-2005:835.json
No cvrfdoc would be found in the statement
                    value = rhsa_data["cvrfdoc"]["aggregate_severity"]

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
This finally fixes #398

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
Previous commits replace the usage of requests.get() altogether with a
custom requests_session which provides better 5xx error handling.
It is now required to mock that object in this test.
IMHO it would make more sense to update this test altogether to use the
real endpoints against some real data.

Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
Signed-off-by: Hritik Vijay <hritikxx8@gmail.com>
Add unspecified scoring system
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
Add tests to  check upstream data
@AmitGupta7580 AmitGupta7580 merged commit a0e6be9 into AmitGupta7580:main Apr 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants