Skip to content

Implement the Ecosyste.ms vulnerability backend#903

Merged
woodruffw merged 1 commit intopypa:mainfrom
trail-of-forks:ap/add-ecosyste_ms
May 20, 2025
Merged

Implement the Ecosyste.ms vulnerability backend#903
woodruffw merged 1 commit intopypa:mainfrom
trail-of-forks:ap/add-ecosyste_ms

Conversation

@tnytown
Copy link
Copy Markdown
Member

@tnytown tnytown commented May 19, 2025

Resolves #894.

@tnytown tnytown force-pushed the ap/add-ecosyste_ms branch 9 times, most recently from ed80277 to 790f21a Compare May 19, 2025 21:13
Comment on lines +156 to +161
VulnerabilityResult(
id=ids[0],
description=description,
fix_versions=sorted(fix_versions),
aliases=set(ids[1:]),
published=self._parse_rfc3339(vuln.get("published")),
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Follow-up: let's create a VulnerabilityResult.create(...) or similar helper API that takes ids, description, fix_versions, published and splits ids into id and aliases as appropriate internally.

@tnytown tnytown force-pushed the ap/add-ecosyste_ms branch 2 times, most recently from 42cc057 to 7159d0b Compare May 19, 2025 21:24
Copy link
Copy Markdown
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @tnytown!

@woodruffw woodruffw merged commit 77a672c into pypa:main May 20, 2025
10 checks passed
@woodruffw woodruffw deleted the ap/add-ecosyste_ms branch May 20, 2025 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature: Evaluate ecosyste.ms as another vulnerability backend

2 participants