-
Notifications
You must be signed in to change notification settings - Fork 61
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
internal/cvelistrepo: factor out WriteTxtarRepo
Move the functionality to write a new txtar repo in the shape of the cvelistrepo (v4 or v5) out test file so it can be reused in tests of other packages. Change-Id: Id83f7edbb3f080132907b91ccbc728d939f8ce00 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/547076 LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]>
- Loading branch information
Showing
2 changed files
with
89 additions
and
63 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,87 @@ | ||
| // Copyright 2023 The Go Authors. All rights reserved. | ||
| // Use of this source code is governed by a BSD-style | ||
| // license that can be found in the LICENSE file. | ||
|
|
||
| package cvelistrepo | ||
|
|
||
| import ( | ||
| "context" | ||
| "fmt" | ||
| "path" | ||
| "time" | ||
|
|
||
| "github.com/go-git/go-git/v5/plumbing" | ||
| "golang.org/x/tools/txtar" | ||
| "golang.org/x/vulndb/internal/cveschema5" | ||
| "golang.org/x/vulndb/internal/gitrepo" | ||
| "golang.org/x/vulndb/internal/test" | ||
| ) | ||
|
|
||
| // WriteTxtarRepo downloads the given CVEs from the CVE list (v4 or v5) in url, | ||
| // and writes them as a txtar repo to filename. | ||
| // | ||
| // Intended for testing. | ||
| func WriteTxtarRepo(ctx context.Context, url string, filename string, cveIDs []string) error { | ||
| var ref plumbing.ReferenceName | ||
|
|
||
| switch url { | ||
| case URLv5: | ||
| ref = plumbing.Main | ||
| default: | ||
| ref = plumbing.HEAD | ||
| } | ||
|
|
||
| repo, err := gitrepo.CloneAt(ctx, url, ref) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| commit, err := gitrepo.HeadCommit(repo) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| files, err := Files(repo, commit) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| idToFile := make(map[string]*File) | ||
| for _, f := range files { | ||
| f := f | ||
| id := cveschema5.FindCVE(f.Filename) | ||
| if id != "" { | ||
| if _, ok := idToFile[id]; ok { | ||
| return fmt.Errorf("found duplicate record files for %s", id) | ||
| } | ||
| idToFile[id] = &f | ||
| } | ||
| } | ||
|
|
||
| arFiles := make([]txtar.File, 0, len(cveIDs)) | ||
| arFiles = append(arFiles, txtar.File{ | ||
| Name: "README.md", | ||
| Data: []byte("ignore me please\n\n"), | ||
| }) | ||
|
|
||
| for _, cveID := range cveIDs { | ||
| f, ok := idToFile[cveID] | ||
| if !ok { | ||
| return fmt.Errorf("could not write %s based on %q: no file for %s found", filename, url, cveID) | ||
| } | ||
|
|
||
| b, err := f.ReadAll(repo) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| arFiles = append(arFiles, txtar.File{ | ||
| Name: path.Join(f.DirPath, f.Filename), | ||
| Data: b, | ||
| }) | ||
| } | ||
|
|
||
| return test.WriteTxtar(filename, arFiles, | ||
| fmt.Sprintf("Repo in the shape of %q.\nUpdated with real data %s.\nAuto-generated; do not edit directly.", | ||
| url, time.Now().Truncate(24*time.Hour).Format(time.RFC3339))) | ||
| } |