Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add Arch Linux Tracker #88

Merged
merged 3 commits into from
Jun 6, 2021

Conversation

santhosh1729
Copy link
Contributor

New Tracker to collect all arch-linux vulnerabilities and store them in vulns-list as json format.

Here, Tracker collects the data from https://security.archlinux.org/json and creates a new folder named arch-linux in vulns-list to store vulns data.

Folder structure in vulns-list:

vuln-list-arch-linux-folder-structure

Json file content for arch-linux vuln

arch-linux-vuln-json-content

Copy link
Collaborator

@knqyf263 knqyf263 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is the advisories filed slice? In other words, I want to know the relationship between AVG-ID and ASA-ID.

arch-linux/archlinux.go Outdated Show resolved Hide resolved
arch-linux/archlinux.go Outdated Show resolved Hide resolved
arch-linux/archlinux_test.go Outdated Show resolved Hide resolved
arch-linux/archlinux_test.go Outdated Show resolved Hide resolved
arch-linux/archlinux_test.go Outdated Show resolved Hide resolved
arch-linux/archlinux_test.go Outdated Show resolved Hide resolved
arch-linux/archlinux_test.go Outdated Show resolved Hide resolved
@santhosh1729 santhosh1729 changed the title WIP - Add Arch Linux Tracker to collect vulnerabilities Add Arch Linux Tracker to collect vulnerabilities Jun 3, 2021
@santhosh1729
Copy link
Contributor Author

Why is the advisories filed slice? In other words, I want to know the relationship between AVG-ID and ASA-ID.

There are some cases when CVE is mapping to multiple advisories that is the reason we have it as slice.
Eg:
Screenshot from 2021-06-03 20-18-11

Screenshot from 2021-06-03 20-08-38
Screenshot from 2021-06-03 20-08-21
Screenshot from 2021-06-03 20-08-08

Arch Linux categorised cves into groups (AVG-100), so used group name for Json name.
Tracker data source: https://security.archlinux.org/all.json

@knqyf263 knqyf263 changed the title Add Arch Linux Tracker to collect vulnerabilities feat: add Arch Linux Tracker Jun 6, 2021
@knqyf263 knqyf263 merged commit 71d8258 into aquasecurity:main Jun 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants