Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/vulndb: create a "stateless" worker #64720

Open
tatianab opened this issue Dec 14, 2023 · 1 comment
Open

x/vulndb: create a "stateless" worker #64720

tatianab opened this issue Dec 14, 2023 · 1 comment
Assignees
@tatianab
Labels
vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Milestone
vuln/unplanned

Comments

@tatianab
Copy link

Re-implement the vulndb worker to be mostly stateless, in particular, to not rely on its own database to remember what it has done before.
@tatianab tatianab self-assigned this Dec 14, 2023
@gopherbot gopherbot added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Dec 14, 2023
@gopherbot gopherbot modified the milestones: Unreleased, vuln/unplanned Dec 14, 2023
@gopherbot
Copy link

Change https://go.dev/cl/550855 mentions this issue: internal/cvelistrepo: add function List (for CVEs)

gopherbot pushed a commit to golang/vulndb that referenced this issue Jan 8, 2024
@tatianab
internal/cvelistrepo: add function List (for CVEs)
39cf7e6 
Adds function List, which returns a list of CVE ids that have been
added or updated since the given time.

The source of truth for this function is the "delta log"
published in the cvelistV5 repo.

This will be used by the new "stateless" worker to find the most
recent CVEs to triage.

For golang/go#64720

Change-Id: I94369691fa24924b357537aa651da7142449f2a9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/550855
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tatianab tatianab

Labels
vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
None yet
Milestone
vuln/unplanned
Development

No branches or pull requests
2 participants
@tatianab @gopherbot