Google Git
Sign in
go / vulndb / 3455efa7786fef5cf1009639819c6bbb11d48043
commit3455efa7786fef5cf1009639819c6bbb11d48043[log] [tgz]
authorRoland Shoemaker <roland@golang.org>Thu Mar 25 09:17:03 2021 -0700
committerFilippo Valsorda <valsorda@google.com>Tue Apr 13 16:18:34 2021 +0200
treedc4b7fd03f3a7043799eaa0a3a0c08c1976d7250
parentb88680fc6842d04b9f9a5e15e17823dc3ff56028 [diff]
all: use consistent index type across packages

All reports still need to have their published fields set.

Change-Id: I64feda32742bb5f85e310211f8da270e4346ad6b
Reviewed-on: https://team-review.git.corp.google.com/c/golang/vulndb/+/1036000
Reviewed-by: Roland Shoemaker <bracewell@google.com>
6 files changed
tree: dc4b7fd03f3a7043799eaa0a3a0c08c1976d7250
  1. client/
  2. cmd/
  3. osv/
  4. report/
  5. reports/
  6. format.md
  7. go.mod
  8. go.sum
  9. new-vuln.sh
  10. README.md
  11. template
README.md

This repository contains a handful of prototypes for the Go vulnerability database, as well as a initial set of vulnerability reports. Some of these packages can probably be coalesced, but for now are easier to work on in a more segmented fashion.

  • reports contains TOML security reports, the format is described in format.md
  • report provides a package for parsing and linting TOML reports
  • osv provides a package for generating OSV-style JSON vulnerability entries from a report.Report
  • client contains a client for accesing HTTP/fs based vulnerability databases, as well as a minimal caching implementation
  • cmd/gendb provides a tool for converting TOML reports into JSON database
  • cmd/genhtml provides a tool for converting TOML reports into a HTML website
  • cmd/linter provides a tool for linting individual reports
  • cmd/report2cve provides a tool for converting TOML reports into JSON CVEs