vulndb

type CustomDataDeleter ¶

type CustomDataDeleter struct {
	DB         *sql.DB
	Provider   string
	FilterCVEs []string
}

CustomDataDeleter is a helper for deleting custom data.

func (o CustomDataDeleter) Delete(ctx context.Context) error

type CustomDataExporter ¶

type CustomDataExporter struct {
	DB         *sql.DB
	Provider   string
	FilterCVEs []string
}

CustomDataExporter is a helper for exporting custom data.

func (o CustomDataExporter) CSV(ctx context.Context, w io.Writer, header bool) error

func (o CustomDataExporter) JSON(ctx context.Context, w io.Writer, indent string) error

type CustomDataImporter ¶

type CustomDataImporter struct {
	DB       *sql.DB
	Owner    string
	Provider string
}

CustomDataImporter is a helper for importing custom data.

func (o CustomDataImporter) ImportFile(ctx context.Context, name string) error

func (o CustomDataImporter) ImportJSON(ctx context.Context, r io.Reader) error

type CustomDataRecord ¶

type CustomDataRecord struct {
	Owner     string    `sql:"owner"`
	Provider  string    `sql:"provider"`
	CVE       string    `sql:"cve_id"`
	Published time.Time `sql:"published"`
	Modified  time.Time `sql:"modified"`
	BaseScore float64   `sql:"base_score"`
	Summary   string    `sql:"summary"`
	JSON      []byte    `sql:"cve_json"`
}

CustomDataRecord represents a db record of the `custom_data` table.

type DataExporter ¶

type DataExporter struct {
	DB              *sql.DB
	FilterProviders []string
	FilterCVEs      []string
}

DataExporter is a helper for exporting vulnerability records from the db.

func (exp DataExporter) CSV(ctx context.Context, w io.Writer, header bool) error

func (exp DataExporter) JSON(ctx context.Context, w io.Writer, indent string) error

type SnoozeCreator ¶

type SnoozeCreator struct {
	DB        *sql.DB
	Owner     string
	Collector string
	Provider  string
	Deadline  time.Time
	Metadata  []byte
}

SnoozeCreator is a helper for creating snoozes.

func (s SnoozeCreator) Create(ctx context.Context, cve ...string) error

type SnoozeDeleter ¶

type SnoozeDeleter struct {
	DB         *sql.DB
	Collector  string
	Provider   string
	FilterCVEs []string
}

SnoozeDeleter deletes snoozes from the database.

func (s SnoozeDeleter) Delete(ctx context.Context) error

type SnoozeGetter ¶

type SnoozeGetter struct {
	DB         *sql.DB
	Collector  string
	Provider   string
	FilterCVEs []string
}

SnoozeGetter gets data from the database.

func (s SnoozeGetter) CSV(ctx context.Context, w io.Writer, header bool) error

type SnoozeRecord ¶

type SnoozeRecord struct {
	Owner     string           `sql:"owner"`
	Collector string           `sql:"collector"`
	Provider  string           `sql:"provider"`
	CVE       string           `sql:"cve_id"`
	Deadline  sqlutil.NullTime `sql:"deadline"`
	Metadata  []byte           `sql:"metadata"`
}

SnoozeRecord represents a database record of the `snooze` table.

type SummaryExporter ¶

type SummaryExporter struct {
	DB *sql.DB
}

SummaryExporter is a helper for exporting database summary.

func (exp SummaryExporter) CSV(ctx context.Context, w io.Writer, header bool) error

func (exp SummaryExporter) SummaryRecords(ctx context.Context) ([]SummaryRecord, error)

type SummaryRecord ¶

type SummaryRecord struct {
	DataType  string    `sql:"data_type"`
	Provider  string    `sql:"provider"`
	Version   string    `sql:"version"`
	CVEs      int64     `sql:"cves"`
	Published time.Time `sql:"published"`
	Modified  time.Time `sql:"modified"`
}

SummaryRecord represents a record of the `summary` query

type VendorDataExporter ¶

type VendorDataExporter struct {
	DB         *sql.DB
	Provider   string
	FilterCVEs []string
}

VendorDataExporter is a helper for exporting vendor data.

func (v VendorDataExporter) CSV(ctx context.Context, w io.Writer, header bool) error

func (v VendorDataExporter) JSON(ctx context.Context, w io.Writer, indent string) error

type VendorDataImporter ¶

type VendorDataImporter struct {
	DB       *sql.DB
	Owner    string
	Provider string
	OnFile   func(filename string)
}

VendorDataImporter is a helper for importing an entire dataset from multiple files.

func (v VendorDataImporter) ImportFiles(ctx context.Context, files ...string) (*VendorRecord, error)

type VendorDataRecord ¶

type VendorDataRecord struct {
	Version   int64     `sql:"version"`
	CVE       string    `sql:"cve_id"`
	Published time.Time `sql:"published"`
	Modified  time.Time `sql:"modified"`
	BaseScore float64   `sql:"base_score"`
	Summary   string    `sql:"summary"`
	JSON      []byte    `sql:"cve_json"`
}

VendorDataRecord represents a db record of the `vendor_data` table.

func VendorDataFromFile(vendor *VendorRecord, name string) ([]VendorDataRecord, error)

type VendorDataTrimmer ¶

type VendorDataTrimmer struct {
	DB                  *sql.DB
	FilterProviders     []string
	DeleteLatestVersion bool // TODO: support keeping up to N versions
}

VendorDataTrimmer is a helper for trimming vendor data.

It deletes all versions but the latest.

Deleting would be easier in common scenarions, but we have some hard constraints:

• Vendor data is versioned
• No foreign key between vendor_data and vendor tables
• MySQL in safe mode forbids deleting from SELECT queries, wants values
• Must keep the binlog smaller than 500M, not enough for the NVD database

Therefore, deletion works as follows:

• Select versions from the vendor table based on the provided settings
• Operate on vendor records with ready=true or older versions
• By default, delete all versions but the latest, for each provider
• Delete from vendor table first, effectively making data records orphans
• Delete any orphan records from vendor_data, effectively crowd sourcing deletions
• Delete data in chunks, keeping binlog small

Deletion operations are expensive.

func (v VendorDataTrimmer) Trim(ctx context.Context) error

type VendorRecord ¶

type VendorRecord struct {
	Version  int64     `sql:"version"`
	TS       time.Time `sql:"ts"`
	Ready    bool      `sql:"ready"`
	Owner    string    `sql:"owner"`
	Provider string    `sql:"provider"`
}

VendorRecord represents a db record of the `vendor` table.