Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix: Avoid aborting SCAP update on failed CVE entries #2159

Merged
merged 1 commit into from
Mar 26, 2024

Conversation

a-h-abdelsalam
Copy link
Contributor

What

Avoid aborting entire SCAP update on failed CVE entries and instead skip the entry, log a warning and continue with next entries.
If any of the following sub-elemens are missing, the CVE entry will be skipped:

  • vuln:published-datetime
  • cvss3:base_metrics/cvss3:base-score or cvss:base_metrics/cvss:score
  • cvss3:base_metrics/cvss3:vector-string or cvss:base_metrics/cvss:vector-string
  • vuln:summary

Why

Avoid aborting the entire SCAP update on problematic CVE entries such as rejected CVEs.

References

GEA-512

@a-h-abdelsalam a-h-abdelsalam requested a review from a team as a code owner March 22, 2024 15:42
Copy link

Conventional Commits Report

Type Number
Bug Fixes 1

🚀 Conventional commits found.

On failed CVE entry, a warning is logged and the entry is skipped
instead of aborting the whole SCAP update.
@a-h-abdelsalam a-h-abdelsalam force-pushed the fix-aborting-scap-update-on-cve-entry branch from 8a61407 to fc2d217 Compare March 26, 2024 12:54
@a-h-abdelsalam a-h-abdelsalam merged commit 51a4c3d into main Mar 26, 2024
9 checks passed
@a-h-abdelsalam a-h-abdelsalam deleted the fix-aborting-scap-update-on-cve-entry branch March 26, 2024 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants