pgsql

func BatchInsertFriendsOfPhpPackageVulnerabilities ¶

func BatchInsertFriendsOfPhpPackageVulnerabilities(db *bun.DB, items []knowledge.PackageVulnerability) error

BatchInsertFriendsOfPhpPackageVulnerabilities inserts FriendsOfPHP-based package-vulnerability links.

func BatchInsertNvdPackageVulnerabilities ¶

func BatchInsertNvdPackageVulnerabilities(db *bun.DB, items []knowledge.PackageVulnerability) error

BatchInsertNvdPackageVulnerabilities inserts NVD-based package-vulnerability links.

func BatchInsertOsvPackageVulnerabilities ¶

func BatchInsertOsvPackageVulnerabilities(db *bun.DB, items []knowledge.PackageVulnerability) error

BatchInsertOsvPackageVulnerabilities inserts OSV-based package-vulnerability links.

func BatchUpdateFriendsOfPHP ¶

func BatchUpdateFriendsOfPHP(db *bun.DB, advisories []knowledge.FriendsOfPHPAdvisory) error

BatchUpdateFriendsOfPHP performs efficient batch upsert operations for multiple FriendsOfPHP advisories

func BatchUpdateOsv ¶

func BatchUpdateOsv(db *bun.DB, osvItems []knowledge.OSVItem) error

BatchUpdateOsv performs efficient batch upsert operations for multiple OSV records. This is significantly more efficient than individual updates when processing many records.

func GetAllFriendsOfPHP ¶

func GetAllFriendsOfPHP(db *bun.DB, limit, offset int) ([]knowledge.FriendsOfPHPAdvisory, error)

GetAllFriendsOfPHP retrieves all FriendsOfPHP advisories with optional pagination

func GetFriendsOfPHPByAdvisoryID ¶

func GetFriendsOfPHPByAdvisoryID(db *bun.DB, advisoryId string) (*knowledge.FriendsOfPHPAdvisory, error)

GetFriendsOfPHPByAdvisoryID retrieves a FriendsOfPHP advisory by its advisory ID

func GetFriendsOfPHPByPackage ¶

func GetFriendsOfPHPByPackage(db *bun.DB, packageName string) ([]knowledge.FriendsOfPHPAdvisory, error)

GetFriendsOfPHPByPackage retrieves FriendsOfPHP advisories for a specific Composer package

func GetFriendsOfPhpUUIDsByAdvisoryIds ¶

func GetFriendsOfPhpUUIDsByAdvisoryIds(db *bun.DB, advisoryIds []string) (map[string]uuid.UUID, error)

GetFriendsOfPhpUUIDsByAdvisoryIds retrieves the internal UUIDs for a list of FriendsOfPHP advisory IDs. Returns a map from advisory_id (string) to internal UUID.

func GetNvdUUIDsByNvdIds ¶

func GetNvdUUIDsByNvdIds(db *bun.DB, nvdIds []string) (map[string]uuid.UUID, error)

GetNvdUUIDsByNvdIds retrieves the internal UUIDs for a list of NVD IDs. Returns a map from nvd_id (string like "CVE-xxx") to internal UUID.

func GetOsvByID ¶

func GetOsvByID(db *bun.DB, osvId string) (*knowledge.OSVItem, error)

GetOsvByID retrieves an OSV record by its OSV ID.

func GetOsvIdsForPackage ¶

func GetOsvIdsForPackage(db *bun.DB, packageName string, ecosystem string) ([]uuid.UUID, error)

GetOsvIdsForPackage retrieves OSV UUIDs for a specific package.

func GetOsvUUIDsByOsvIds ¶

func GetOsvUUIDsByOsvIds(db *bun.DB, osvIds []string) (map[string]uuid.UUID, error)

GetOsvUUIDsByOsvIds retrieves the internal UUIDs for a list of OSV IDs. Returns a map from osv_id (string like "GHSA-xxx") to internal UUID.

func GetVulnerabilitiesForPackage ¶

func GetVulnerabilitiesForPackage(db *bun.DB, packageName string, ecosystem string) ([]knowledge.PackageVulnerability, error)

GetVulnerabilitiesForPackage retrieves all vulnerability links for a specific package.

func GetVulnerabilitiesForPackages ¶

func GetVulnerabilitiesForPackages(db *bun.DB, packages []struct {
	Name      string
	Ecosystem string
}) ([]knowledge.PackageVulnerability, error)

GetVulnerabilitiesForPackages retrieves vulnerability links for multiple packages.

func UpdateCWE ¶

func UpdateCWE(db *bun.DB, cwes []knowledge.CWEEntry) error

UpdateCWE updates the CWE (Common Weakness Enumeration) entries in the graph database. It takes a graph driver and a slice of CWEEntry structs as input. For each CWEEntry in the slice, it tries to update the corresponding document in the "CWE" vertex collection. If the document exists and is successfully updated, it generates a changelog and creates a new document in the "REVISIONS" vertex collection. If the document doesn't exist, it creates a new document in the "CWE" vertex collection. Returns an error if any operation fails.

func UpdateEPSS ¶

func UpdateEPSS(db *bun.DB, epssScores []knowledge.EPSS) error

UpdateCWE updates the CWE (Common Weakness Enumeration) entries in the graph database. It takes a graph driver and a slice of CWEEntry structs as input. For each CWEEntry in the slice, it tries to update the corresponding document in the "CWE" vertex collection. If the document exists and is successfully updated, it generates a changelog and creates a new document in the "REVISIONS" vertex collection. If the document doesn't exist, it creates a new document in the "CWE" vertex collection. Returns an error if any operation fails.

func UpdateFriendsOfPHP ¶

func UpdateFriendsOfPHP(db *bun.DB, advisory knowledge.FriendsOfPHPAdvisory) error

UpdateFriendsOfPHP updates or inserts a FriendsOfPHP advisory using an efficient upsert operation

func UpdateLicenses ¶

func UpdateLicenses(db *bun.DB, licenses []knowledge.License) error

func UpdateNvd ¶

func UpdateNvd(db *bun.DB, nvd []knowledge.NVDItem) error

func UpdateOsv ¶

func UpdateOsv(db *bun.DB, osv knowledge.OSVItem) error

UpdateOsv updates or inserts an OSV document using an efficient upsert operation. This replaces the inefficient check-then-act pattern with a single atomic operation.

func UpdatePackage ¶

func UpdatePackage(db *bun.DB, pack knowledge.Package) error

UpdatePackage updates a package in the specified graph with the given package information. It takes the graph, package details, and language as input parameters. If the package key is empty, it returns an error. If the package already exists in the graph, it updates the package and creates a revision document with the changelog. If the package doesn't exist, it creates a new package document. It also updates the versions of the package and creates edge documents to link the package with its versions. Returns an error if any operation fails.