SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 11:55:40 +01:00
Code Issues Releases Activity Actions

Merge pull request #497 from csaf-poc/example-fix-purls-searcher

Browse source 
API: Fix pattern matching of purls and document categories in advisory model
This commit is contained in:
JanHoefelmeyer 2023-11-03 07:08:39 +01:00 • committed by GitHub
commit 06d8e59b66
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
csaf/advisory.go
View file

@ -106,7 +106,7 @@ var cpePattern = patternUnmarshal("^(cpe:2\\.3:[aho\\*\\-](:(((\\?*|\\*?)([a-zA-
// PURL represents a package URL in an advisory.
type PURL string
var pURLPattern = patternUnmarshal(`^pkg:[A-Za-z\\.\\-\\+][A-Za-z0-9\\.\\-\\+]*/.+`)
var pURLPattern = patternUnmarshal("^pkg:[A-Za-z\\.\\-\\+][A-Za-z0-9\\.\\-\\+]*/.+")
// XGenericURI represents an identifier for a product.
type XGenericURI struct {
@ -223,7 +223,7 @@ type AggregateSeverity struct {
// DocumentCategory represents a category of a document.
type DocumentCategory string
var documentCategoryPattern = patternUnmarshal(`^[^\\s\\-_\\.](.*[^\\s\\-_\\.])?$`)
var documentCategoryPattern = patternUnmarshal("^[^\\s\\-_\\.](.*[^\\s\\-_\\.])?$")
// Version is the version of a document.
type Version string

11
examples/purls_searcher/main.go
View file

@ -123,4 +123,15 @@ func (uf *urlFinder) findURLs(adv *csaf.Advisory) {
for _, b := range tree.Branches {
recBranch(b)
}
// Third iterate over relationships.
if tree.RelationShips != nil {
for _, rel := range *tree.RelationShips {
if rel != nil {
if fpn := rel.FullProductName; fpn != nil && fpn.ProductID != nil {
add(slices.Index(uf.ids, *fpn.ProductID), fpn.ProductIdentificationHelper)
}
}
}
}
}