Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Changes-2 #4

Merged
merged 11 commits into from
Nov 3, 2023
Merged

Changes-2 #4

merged 11 commits into from
Nov 3, 2023

Conversation

joydeep049
Copy link
Owner

Changes-2

dependabot bot and others added 11 commits November 1, 2023 15:17
@dependabot
chore(deps): bump actions/setup-python from 2 to 4 (#3472)
0d68759 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps-dev): bump mypy from v1.5.1 to 1.6.1 (#3435)
bd3eca0 
Bumps [mypy](https://github.com/python/mypy) from v1.5.1 to 1.6.1.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.5.1...v1.6.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps-dev): bump pre-commit from 3.4.0 to 3.5.0 (#3425)
f73c486 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v3.4.0...v3.5.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump actions/checkout from 2 to 4 (#3471)
5ce2ad4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v2...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@github-actions @web-flow
chore: update pre-commit config (#3365)
db96d6d 
Co-authored-by: GitHub <noreply@github.com>
@dependabot @terriko
chore(deps): bump github/codeql-action from 2.22.4 to 2.22.5 (#3486)
edc82e9 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.4 to 2.22.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@49abf0b...74483a3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Terri Oda <terri.oda@intel.com>
@btwshivam @terriko
docs: add missing docstrings to data_sources/gad_source.py #3466 (#3488)
2fecbb1 
fixes #3466

Co-authored-by: Terri Oda <terri@toybox.ca>
@AryanBakliwal @terriko
docs: add missing docstrings to output_engine/__init__.py (#3480)
e61f367 
fixes  #3463

---------

Co-authored-by: Terri Oda <terri@toybox.ca>
@dependabot @terriko
chore(deps): bump check-spelling/check-spelling from 0.0.21 to 0.0.22 (…
27fe27b 
…#3364)

* chore(deps): bump check-spelling/check-spelling from 0.0.21 to 0.0.22

Bumps [check-spelling/check-spelling](https://github.com/check-spelling/check-spelling) from 0.0.21 to 0.0.22.
- [Release notes](https://github.com/check-spelling/check-spelling/releases)
- [Commits](check-spelling/check-spelling@d7cd297...00c989c)

---
updated-dependencies:
- dependency-name: check-spelling/check-spelling
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: questionable fix for .github/workflows/spelling.yml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Terri Oda <terri.oda@intel.com>
@joydeep049 @terriko
fix: KeyError in format_data function (#3452)
4747248 
* Update osv_source.py

Debugged the code based on a basic problem that I faced while installing cve-bin-tool

* fix: flake8 and codeql tweaks

* chore: blacken cve_bin_tool/data_sources/osv_source.py

---------

Co-authored-by: Terri Oda <terri.oda@intel.com>
@btwshivam @terriko
docs: add missing docstrings to data_sources/curl_source.py #3464 (#3489
44b5e99 
)

* Update curl_source.py
* chore: blacken cve_bin_tool/data_sources/curl_source.py

---------

Co-authored-by: Terri Oda <terri.oda@intel.com>
@joydeep049 joydeep049 merged commit f0bd35d into joydeep049:main Nov 3, 2023
4 of 5 checks passed
github-advanced-security[bot]
github-advanced-security bot found potential problems Nov 3, 2023
View reviewed changes
cve_bin_tool/data_sources/osv_source.py
): # if package name is of format github.com/xxxx/yyyy xxxx can be vendor name and yyyy is package name
vendor = product.split("/")[-2] # trying to guess vendor name

if product.startswith("github.com/"):

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

The string
github.com/
Loading
may be at an arbitrary position in the sanitized URL.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@joydeep049 @btwshivam @AryanBakliwal