mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-08 08:30:47 -09:00
cve-check: fix CVE URL format
Update NVD source to full URL format following CycloneDC 1.6
specification [1].
Before: "url": "https://nvd.nist.gov/"
After: "url": "https://nvd.nist.gov/vuln/detail/CVE-XXXX"
[1] https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_source_url
Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>
Acked-By: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit ac466d4b1a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
committed by
Thomas Perale
parent
a533d160c0
commit
2294bcbc27
@@ -131,7 +131,7 @@ def nvd_cve_to_cdx_vulnerability(nvd_cve):
|
||||
"description": cve_api_get_lang_from_list(nvd_cve.get("descriptions", [])) or "",
|
||||
"source": {
|
||||
"name": "NVD",
|
||||
"url": "https://nvd.nist.gov/"
|
||||
"url": f"https://nvd.nist.gov/vuln/detail/{nvd_cve['id']}"
|
||||
},
|
||||
**({
|
||||
"published": nvd_cve["published"],
|
||||
|
||||
Reference in New Issue
Block a user