Skip to content

Add ImpactedPackage model to track affected and fixed packages #1970

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
keshav-space merged 19 commits into from
Jul 30, 2025
Merged

Add ImpactedPackage model to track affected and fixed packages #1970

keshav-space merged 19 commits into from
Jul 30, 2025

Conversation

@keshav-space
Copy link
Member

@keshav-space keshav-space commented Jul 29, 2025

@keshav-space
Add AffectedPackageV2 for advisory v2
a5fdd6a 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Add ImpactedPackage model to track AffectedPackageV2 data
9bcb298 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Add timestamp to impacted packages
2222287 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Use ImpactedPackage to filter vulnerable packages in v2 queryset
f647d96 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Get related advisory using impacted pkg in v2 pkg details view
3859939 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Use impact to determine suitable fix for affected pkg
0ae0057 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Use impact table to fetch fixed and affected pkg in API
c5b78ef 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Fix package filtering by PURL and Advisory ID
a6be088 
Fixes: #1960

Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Include latest and next non-vulnerable versions in API v2
58fff59 
Fixes: #1959

Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Create impacted pkg during advisory insertion in v2 base importer
112f746 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Add timzone to parsed datetime
ffa58a6 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Use text field to store version range string
4a4f142 
Version range can be very long (>5000 char) for some advisory.

Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Properly handle conversion of advisory v2 object to AdvisoryData
a8846f8 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Update V2 pipelines to create AffectedPackageV2
79a7e7f 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Update CodeFix pipeline to process impacted packages
9f4d4d0 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Compute package risk from impacts
c7d6a31 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Update tests related to V2 advisory
3cc7299 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
@keshav-space
Organize all v2 tests in one place
083daed 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
This was linked to issues Jul 29, 2025
VCIO-next: Do not merge AffectedPackage while importing AdvisoryV2 #1950
Closed
Missing next_non_vulnerable and latest_non_vulnerable fields in /api/v2/advisories-packages endpoint #1959
Closed
API: filtering by Fixing advisory and Affecting advisory not working #1960
Closed
TG1999
TG1999 reviewed Jul 29, 2025
View reviewed changes
TG1999
TG1999 reviewed Jul 29, 2025
View reviewed changes
TG1999
TG1999 reviewed Jul 29, 2025
View reviewed changes
@keshav-space
Prevent committing partial advisory data to db
4ef60d2 
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
TG1999
TG1999 approved these changes Jul 30, 2025
View reviewed changes
Copy link
Contributor

@TG1999 TG1999 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@keshav-space keshav-space merged commit 5121e31 into main Jul 30, 2025
10 checks passed
@keshav-space keshav-space deleted the unmerge-affected-range branch July 30, 2025 09:23
@keshav-space keshav-space mentioned this pull request Aug 1, 2025
Closed
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@TG1999 TG1999 TG1999 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

2 participants

@keshav-space @TG1999