thoth-cve-update-job

A job for updating Thoth's CVE database of packages.

This job checks for new CVE records in the advisory-db provided by PyPA. If there are new CVE records found, this job automatically creates corresponding CVE entries in the database.

Installation and Deployment

This job is run as an OpenShift CronJob that checks for updates in the advisory-db. The deployment templates can be found at Thoth's thoth-application.

Running CVE update job locally

You can run this job locally without any cluster deployment. To do so, issue the following command:

$ pipenv install  # Install all the requirements
$ pipenv run python3 ./app.py

The CVE job implementation will by default talk to your local PostgreSQL instance located on localhost:5432. Follow local PostgreSQL setup instructions for more info.