Skip to content

OpenShift cron job which keeps f8a graph database up-to-date

Notifications You must be signed in to change notification settings

fabric8-analytics/graph-cve-sync-1

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

graph-cve-sync

OpenShift cron job which keeps fabric8-analytics graph database up-to-date.

Configuration

Following environment variables can be used to control behaviour of the cron job:

SYNC_MODE - can be "full" or "diff". The former forces full sync while latter synchronizes only the changes since last successful run. Default is "diff".

BAYESIAN_DATA_IMPORTER_SERVICE_HOST - data-importer service hostname

BAYESIAN_DATA_IMPORTER_SERVICE_PORT - data-importer service port

DRY_RUN - don't write anything to graph

Snyk Vulnerability Data

The cron job is now extended to populate the Snyk vulnerabilities into our graph. For determining the affected versions, we use a combination of python's in built libraries and our own custom "fabric8-analytics-version-comparator". This is needed because unlike npm (node), which follows the semantic versions, maven and python do not.

About

OpenShift cron job which keeps f8a graph database up-to-date

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 88.4%
  • Shell 10.7%
  • Other 0.9%