Skip to content

SYN-5701: CVSS norm doesn't handle unordered vectors #3224

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 14 commits into from
Jul 11, 2023

Conversation

ghost
Copy link

@ghost ghost commented Jul 7, 2023

  • Update risk model so risk:vuln:cvss:v2 and :cvss:v3 props are proper types that can do normalization and validation of values
  • Added migration model to synapse-regression repo
  • Updated tests

Resolves SYN-5701

- Update risk model so risk:vuln:cvss:v2 and :cvss:v3 props are proper types that can do normalization and validation of values
- Added migration model to synapse-regression repo
- Updated tests

Resolves SYN-5701
@codecov
Copy link

codecov bot commented Jul 7, 2023

Codecov Report

Patch coverage: 100.00% and project coverage change: -0.11 ⚠️

Comparison is base (3aea5f9) 97.30% compared to head (01aae9d) 97.19%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #3224      +/-   ##
==========================================
- Coverage   97.30%   97.19%   -0.11%     
==========================================
  Files         225      225              
  Lines       45014    45036      +22     
==========================================
- Hits        43799    43771      -28     
- Misses       1215     1265      +50     
Flag Coverage Δ
linux 97.19% <100.00%> (-0.01%) ⬇️
linux_replay ?

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
synapse/lib/chop.py 99.15% <100.00%> (+0.02%) ⬆️
synapse/lib/modelrev.py 98.21% <100.00%> (+0.01%) ⬆️
synapse/models/risk.py 100.00% <100.00%> (ø)

... and 10 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@ghost ghost marked this pull request as ready for review July 7, 2023 19:48
@ghost ghost changed the title WIP: SYN-5701: CVSS norm doesn't handle unordered vectors SYN-5701: CVSS norm doesn't handle unordered vectors Jul 7, 2023
@vEpiphyte vEpiphyte added enhancement reqChangelog requires changelog labels Jul 7, 2023
@vEpiphyte vEpiphyte added this to the v2.14x.x milestone Jul 7, 2023
@vEpiphyte vEpiphyte added the bug label Jul 8, 2023
@ghost ghost requested review from invisig0th and vEpiphyte July 10, 2023 16:26
@ghost ghost requested a review from vEpiphyte July 10, 2023 19:52
invisig0th
invisig0th previously approved these changes Jul 11, 2023
@invisig0th invisig0th merged commit 388aa55 into master Jul 11, 2023
@invisig0th invisig0th deleted the blackout/SYN-5701/cvss-model-update branch July 11, 2023 19:51
@vEpiphyte vEpiphyte removed the reqChangelog requires changelog label Jul 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants