Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/vulndb: create a "stateless" worker #64720

Open
tatianab opened this issue Dec 14, 2023 · 2 comments
Open

x/vulndb: create a "stateless" worker #64720

tatianab opened this issue Dec 14, 2023 · 2 comments
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Milestone
vuln/unplanned

Comments

@tatianab
Copy link

Re-implement the vulndb worker to be mostly stateless, in particular, to not rely on its own database to remember what it has done before.
@tatianab tatianab self-assigned this Dec 14, 2023
@gopherbot gopherbot added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Dec 14, 2023
@gopherbot gopherbot modified the milestones: Unreleased, vuln/unplanned Dec 14, 2023
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/550855 mentions this issue: internal/cvelistrepo: add function List (for CVEs)

gopherbot pushed a commit to golang/vulndb that referenced this issue Jan 8, 2024
@tatianab
internal/cvelistrepo: add function List (for CVEs)
39cf7e6 
Adds function List, which returns a list of CVE ids that have been
added or updated since the given time.

The source of truth for this function is the "delta log"
published in the cvelistV5 repo.

This will be used by the new "stateless" worker to find the most
recent CVEs to triage.

For golang/go#64720

Change-Id: I94369691fa24924b357537aa651da7142449f2a9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/550855
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
@tatianab tatianab removed their assignment Mar 6, 2025
@JunyangShao
Copy link
Contributor

@golang/vulndb

@JunyangShao JunyangShao added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Mar 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
None yet
Milestone
vuln/unplanned
Development

No branches or pull requests
3 participants
@tatianab @gopherbot @JunyangShao