From bc888340cf16c6f046c213884344dce7bf869023 Mon Sep 17 00:00:00 2001 From: Tushar Goel Date: Fri, 4 Apr 2025 11:45:22 +0530 Subject: [PATCH 1/2] Stop github OSV importer crashes Signed-off-by: Tushar Goel --- vulnerabilities/importers/osv.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/vulnerabilities/importers/osv.py b/vulnerabilities/importers/osv.py index 90f4200e8..85d0d9a0c 100644 --- a/vulnerabilities/importers/osv.py +++ b/vulnerabilities/importers/osv.py @@ -220,7 +220,14 @@ def get_affected_purl(affected_pkg, raw_id): f"No PackageURL possible: {purl!r} for affected_pkg {affected_pkg} for OSV id: {raw_id}" ) return - return PackageURL.from_string(str(purl)) + try: + package_url = PackageURL.from_string(str(purl)) + return package_url + except: + logger.error( + f"Invalid PackageURL: {purl!r} for affected_pkg {affected_pkg} for OSV id: {raw_id}" + ) + return None def get_affected_version_range(affected_pkg, raw_id, supported_ecosystem): From 0aaaa11cff1bbc1976dfff2a7a1311ca6eb544ca Mon Sep 17 00:00:00 2001 From: Tushar Goel Date: Fri, 4 Apr 2025 11:52:29 +0530 Subject: [PATCH 2/2] Fix formatting issues Signed-off-by: Tushar Goel --- vulnerabilities/importers/osv.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vulnerabilities/importers/osv.py b/vulnerabilities/importers/osv.py index 85d0d9a0c..19867cda5 100644 --- a/vulnerabilities/importers/osv.py +++ b/vulnerabilities/importers/osv.py @@ -227,7 +227,7 @@ def get_affected_purl(affected_pkg, raw_id): logger.error( f"Invalid PackageURL: {purl!r} for affected_pkg {affected_pkg} for OSV id: {raw_id}" ) - return None + return None def get_affected_version_range(affected_pkg, raw_id, supported_ecosystem):