feat(checker): add checker for Moby (intel#3753)

Signed-off-by: Meet Soni <meetsoni3017@gmail.com>
inosmeet · Mar 12, 2024 · 36fd142 · 36fd142
1 parent 0fb4095
commit 36fd142
Show file tree

Hide file tree

Showing 4 changed files with 47 additions and 0 deletions.
diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py
@@ -217,6 +217,7 @@
     "minidlna",
     "miniupnpc",
     "miniupnpd",
+    "moby",
     "modsecurity",
     "monit",
     "mosquitto",

diff --git a/cve_bin_tool/checkers/moby.py b/cve_bin_tool/checkers/moby.py
@@ -0,0 +1,26 @@
+# Copyright (C) 2024 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+"""
+CVE checker for moby:
+https://www.cvedetails.com/version-list/17212/41384/1/Mobyproject-Moby.html
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class MobyChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = [
+        r"docker",
+        r"dockerd",
+        r"docker-init",
+        r"docker-proxy",
+    ]
+    VERSION_PATTERNS: list[str] = [
+        r"moby-([0-9]+\.[0-9]+\.[0-9]+)",
+    ]
+    VENDOR_PRODUCT: list[tuple[str, str]] = [
+        ("mobyproject", "moby"),
+    ]
diff --git a/test/condensed-downloads/moby-engine-24.0.5-1.fc40.aarch64.rpm.tar.gz b/test/condensed-downloads/moby-engine-24.0.5-1.fc40.aarch64.rpm.tar.gz
diff --git a/test/test_data/moby.py b/test/test_data/moby.py
@@ -0,0 +1,20 @@
+mapping_test_data = [
+    {
+        "product": "moby",
+        "version": "24.0.5",
+        "version_strings": ["moby-24.0.5"],
+    },
+]
+
+package_test_data = [
+    {
+        "url": "https://www.rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/m/",
+        "product": "moby",
+        "version": "24.0.5",
+        "package_name": "moby-engine-24.0.5-1.fc40.aarch64.rpm",
+        "other_products": [
+            "gcc",
+            "go",
+        ],
+    },
+]