What did you do this week?
I worked on saving intermediate reports along with some metadata and later merge them. This will improve the triage and tracking of reports from different end-users. The strucutre of these new intermediate reports look like this:
-a INTERMEDIATE_PATH, --append INTERMEDIATE_PATH :
This will create intermediate reports on current scans and save them in `INTERMEDIATE_PATH`
-t TAG, --tag TAG :
This will add a unique tag in intermediate reports so that users can differentiate between mulitple intermediate reports.
-m INTERMEDIATE_REPORTS, --merge INTERMEDIATE_REPORTS :
This will take a list of comma-separated paths and merge them. Users can use this along with `-f --format` and `-o --output-file` to get output in other formats
What is coming up next?
I am going to work on the documentation and testing of above-added features in the upcoming weeks.
Possible addition of some filters while using `-m --merge` argument.
A wepage based utitlity to merge these intermediate reports rather than using `-m --merge`.
Did you get stuck anywhere?
No
I worked on saving intermediate reports along with some metadata and later merge them. This will improve the triage and tracking of reports from different end-users. The strucutre of these new intermediate reports look like this:
{
"metadata": {
"timestamp": "2021-06-17.00-00-30",
"tag": "backend",
"scanned_dir": "/home/path/",
"products_with_cve": 139,
"products_without_cve": 2,
"total_files": 49
},
"report": [
{
"vendor": "gnu",
"product": "gcc",
"version": "9.0.1",
"cve_number": "CVE-2019-15847",
"severity": "HIGH",
"score": "7.5",
"cvss_version": "3",
"paths": "/home/path/glib.tar.gz,/home/path/gcc.tar.gz",
"remarks": "NewFound",
"comments": ""
},
]
}
I have added 3 parameters in cve-bin-tool cli for same:
What is coming up next?
I am going to work on the documentation and testing of above-added features in the upcoming weeks.
Possible addition of some filters while using `-m --merge` argument.
A wepage based utitlity to merge these intermediate reports rather than using `-m --merge`.
Did you get stuck anywhere?
No