Skip to content

complete support for Bom.Vulnerabilities #164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
12 tasks done
jkowalleck opened this issue Aug 7, 2022 · 0 comments · Fixed by #722
Closed
12 tasks done

complete support for Bom.Vulnerabilities #164

jkowalleck opened this issue Aug 7, 2022 · 0 comments · Fixed by #722
Assignees
@jkowalleck
Labels
enhancement New feature or request
Milestone
Vulnerabilities -...

Comments

@jkowalleck
Copy link
Member

jkowalleck commented Aug 7, 2022 •
edited
Loading

checklist
@jkowalleck jkowalleck added the enhancement New feature or request label Aug 7, 2022
@jkowalleck jkowalleck mentioned this issue Aug 7, 2022
Closed
@jkowalleck jkowalleck changed the title Bom.Vulnerabilities complete support for Bom.Vulnerabilities Aug 7, 2022
@jkowalleck jkowalleck pinned this issue Aug 7, 2022
@jkowalleck jkowalleck unpinned this issue Aug 15, 2022
@jkowalleck jkowalleck added the help wanted Extra attention is needed label Sep 17, 2022
@jkowalleck jkowalleck mentioned this issue Jan 20, 2023
Merged
21 tasks
@jkowalleck jkowalleck added this to the Bom.Vulnerabilities milestone Jan 20, 2023
jkowalleck added a commit that referenced this issue Feb 2, 2023
@jkowalleck @thepwagner
feat: bom.vulnerabilities data models and enums (#419)
249ef31 
* Added
  * New vulnerability-related enums were added in a new namespace `Enums.Vulnerability` ([#164] via [#419])  
    _Release stage is “beta”._ These namespace and enums have been released to third-party developers experimentally for the purpose of collecting feedback. These enums should not be used in production, because their contracts may change without notice.
    * `AffectStatus`
    * `AnalysisJustification`
    * `AnalysisResponse`
    * `AnalysisState`
    * `RatingMethod`
    * `Severity`
  * New vulnerability-related models were added in a new namespace `Models.Vulnerability` ([#164] via [#419])  
    _Release stage is “beta”._ These namespace and models have been released to third-party developers experimentally for the purpose of collecting feedback. These models should not be used in production, because their contracts may change without notice.  
    _Attention_: The models are not yet supported by shipped serializers nor shipped normalizers.
    * `Advisory`, `AdvisoryRepository`
    * `Affect`, `AffectRepository`, `AffectedSingleVersion`, `AffectedVersionRange`, `AffectedVersionRepository`
    * `Analysis`
    * `Credits`
    * `Rating`, `RatingRepository`
    * `Reference`, `ReferenceRepository`
    * `Source`
    * `Vulnerability`, `VulnerabilityRepository`
  * New class `Models.OrganizationalEntityRepository` to represent a collection of `Models.OrganizationalEntity` (via [#419])  
    Additionally, `Models.OrganizationalEntity.compare()` was implemented.
  * New types and related functionality Common Weaknesses Enumerations (CWE) were added (via [#419])  
    _Release stage is “beta”._ These types, functions and classes have been released to third-party developers experimentally for the purpose of collecting feedback. These types, functions and classes should not be used in production, because their contracts may change without notice.
    * type `Types.CWE`
    * runtime validation `Types.isCWE()`
    * class `Types.CweRepository`

---------

Signed-off-by: Peter Wagner <[email protected]>
Signed-off-by: Jan Kowalleck <[email protected]>
Co-authored-by: Peter Wagner <[email protected]>
xmasoracle added a commit to xmasoracle/cyclonedx-javascript-library that referenced this issue Mar 16, 2023
@xmasoracle
feat: bom.vulnerabilities JSON normalization/serialization (Cyclone…
11d78a5 
…DX#164)

Signed-off-by: Xavier Maso <[email protected]>
@xmasoracle xmasoracle mentioned this issue Mar 16, 2023
Merged
xmasoracle added a commit to xmasoracle/cyclonedx-javascript-library that referenced this issue Mar 20, 2023
@xmasoracle
feat: bom.vulnerabilities JSON normalization/serialization (Cyclone…
5fd9b44 
…DX#164)

Signed-off-by: Xavier Maso <[email protected]>
xmasoracle added a commit to xmasoracle/cyclonedx-javascript-library that referenced this issue Mar 20, 2023
@xmasoracle
feat: bom.vulnerabilities JSON normalization/serialization (Cyclone…
7ffdd82 
…DX#164)

Signed-off-by: Xavier Maso <[email protected]>
This was referenced May 8, 2023
Merged
Merged
jkowalleck added a commit that referenced this issue May 9, 2023
@xmasoracle @jkowalleck
feat: bom.vulnerabilities JSON normalization (#548)
37e88ad 
* feat: `bom.vulnerabilities` JSON normalization/serialization (#164)

Signed-off-by: Xavier Maso <[email protected]>

* Address straightforward PR comments

Signed-off-by: Xavier Maso <[email protected]>

* Address comments on time-based properties

Signed-off-by: Xavier Maso <[email protected]>

* Add `bom-ref` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Correct `references` of serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `ratings` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `cwes` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `advisories` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `credits` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `tools` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `analysis` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `properties` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Add `affects` to serialized `vulnerability`

Signed-off-by: Xavier Maso <[email protected]>

* Refactor type names for `Normalized.Vulnerability.*`

Signed-off-by: Xavier Maso <[email protected]>

* Discrimate `Vulnerability.bomRef`s

Signed-off-by: Xavier Maso <[email protected]>

* cs-fix

Signed-off-by: Jan Kowalleck <[email protected]>

* tests: fix expected

Signed-off-by: Jan Kowalleck <[email protected]>

---------

Signed-off-by: Xavier Maso <[email protected]>
Signed-off-by: Jan Kowalleck <[email protected]>
Co-authored-by: Jan Kowalleck <[email protected]>
@jkowalleck jkowalleck pinned this issue May 9, 2023
@jkowalleck jkowalleck self-assigned this May 10, 2023
@jkowalleck jkowalleck removed the help wanted Extra attention is needed label May 10, 2023
@jkowalleck jkowalleck unpinned this issue May 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jkowalleck jkowalleck

Labels
enhancement New feature or request
Projects
None yet
Milestone
Vulnerabilities - models, normalize, ...
Development

Successfully merging a pull request may close this issue.

feat: serialize/normalizer bom.vulnerabilities CycloneDX/cyclonedx-javascript-library
1 participant
@jkowalleck