internal/worker: add link to NIST entry in vulndb CVE issues
Change-Id: I70cecca14fac8396882737d38a616555d3322ee3
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/392694
Reviewed-by: Julie Qiu <julie@golang.org>
Trust: Damien Neil <dneil@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: kokoro <noreply+kokoro@google.com>
diff --git a/internal/worker/worker.go b/internal/worker/worker.go
index 9dfda69..5b2c32d 100644
--- a/internal/worker/worker.go
+++ b/internal/worker/worker.go
@@ -277,9 +277,10 @@
return "", err
}
+ nistURL := "https://nvd.nist.gov/vuln/detail/" + cr.ID
intro := fmt.Sprintf(
- "In [%s](%s/tree/%s/%s), the reference URL [%s](%s) (and possibly others) refers to something in Go.",
- cr.ID, cvelistrepo.URL, cr.CommitHash, cr.Path, cr.Module, "https://"+cr.Module)
+ "In [%s](%s/tree/%s/%s) [NIST](%s), the reference URL [%s](%s) (and possibly others) refers to something in Go.",
+ cr.ID, cvelistrepo.URL, cr.CommitHash, cr.Path, nistURL, cr.Module, "https://"+cr.Module)
if r.Links.Commit != "" {
intro += fmt.Sprintf("\n- Commit: %s", r.Links.Commit)
}
diff --git a/internal/worker/worker_test.go b/internal/worker/worker_test.go
index bd1d2b1..31f600e 100644
--- a/internal/worker/worker_test.go
+++ b/internal/worker/worker_test.go
@@ -219,7 +219,7 @@
if err != nil {
t.Fatal(err)
}
- want := `In [ID1](https://github.com/CVEProject/cvelist/tree//), the reference URL [a.Module](https://a.Module) (and possibly others) refers to something in Go.
+ want := `In [ID1](https://github.com/CVEProject/cvelist/tree//) [NIST](https://nvd.nist.gov/vuln/detail/ID1), the reference URL [a.Module](https://a.Module) (and possibly others) refers to something in Go.
` + "```" + `
module: a.Module
