What did I do this week?
I implemented formatting CVE data from OSV and integrated the database to be used by code handling the database. The data from OSV does not include vendors so a solution to rectify that needs to be implemented.What is coming up next?
Next, I will be adding a mechanism to update vendor data in CVEs from OSV, so that CVEs can be detected and reported.
Did I get stuck anywhere?
No, I did not get stuck anywhere.
What did I do this week?
I added the bare bones to implement the OSV data source. Fetching CVE data and parsing it is implemented, but the source itself is not integrated as of now.
Formatting of data, getting vendor data, and actual integration still remains to be implemented.
What is coming up next?
Next, I will be finishing up with formatting of data to a common format.
Did I get stuck anywhere?
No, I did not get stuck anywhere.
What did I do this week?
I implemented a new structure for database handling, as the database handling and CVE data fetching functionalities are now separate.
Multiple data sources can now be added, I am going with a modular approach with them.
What is coming up next?
Next, I will be adding a new data source! I will be starting with OSV.
Did I get stuck anywhere?
I did not get stuck, as I did plan this ahead while refactoring.
Hello, I am Rhythm Jamwal, a student pursuing Computer Science and Engineering. I will be adding new data sources to CVE Binary Tool, hence increasing CVE coverage.
What did I do this week?
I went through the code responsible for database handling, which is also responsible for fetching CVE Data from NVD, looking to split both functionalities.
This refactor will help in implementing a new structure for database handling and fetching CVEs from multiple sources.
What is coming up next?
Next, I will be looking to implement the new structure for database handling that supports multiple data sources.
Did I get stuck anywhere?
I did not get stuck, the refactoring was lengthy but easy.