Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GradleOSV Scanner #563

Merged
merged 24 commits into from
Mar 18, 2022
Merged

GradleOSV Scanner #563

merged 24 commits into from
Mar 18, 2022

Conversation

maitrayshah-cb
Copy link
Contributor

@maitrayshah-cb maitrayshah-cb commented Mar 3, 2022

  • Adding support for Gradle CVE Scanning.
  • Handling various version strings.
  • Adding SARIF support.

@maitrayshah-cb maitrayshah-cb marked this pull request as draft March 3, 2022 06:31
@maitrayshah-cb maitrayshah-cb marked this pull request as ready for review March 4, 2022 05:01
Copy link
Contributor

@joshuaostrom-cb joshuaostrom-cb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the quick progress on this! Overall looks great, left a few requests.

@cb-heimdall
Copy link

Review Error for joshua-ostrom @ 2022-03-15 14:28:56 UTC
User failed mfa authentication, see go/mfa-help

return report_success if results.empty?

report_failure
log(JSON.pretty_generate(results))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did you intended to retain this loggin?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes that's the one printing to console with the results

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should really wrap these, but that can be a salus-wide change for another day

scanner = Salus::Scanners::OSV::GradleOSV.new(repository: repo, config: {})
stub_req_with_valid_response
scanner.run
report = Salus::Report.new(project_name: "Neon Genesis")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TIL Neon Genesis

@maitrayshah-cb maitrayshah-cb merged commit e69cc17 into master Mar 18, 2022
@maitrayshah-cb maitrayshah-cb mentioned this pull request Mar 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants