vulnerablecode icon indicating copy to clipboard operation
vulnerablecode copied to clipboard

Refactor Gitimporter using fetchcode

Open ziadhany opened this issue 2 years ago • 2 comments

Reference: #806 Signed-off-by: ziad [email protected]

ziadhany avatar Aug 01 '22 13:08 ziadhany

@ziadhany , please add logs for gitlab importer.

TG1999 avatar Sep 22 '22 12:09 TG1999

@ziadhany , please add logs for gitlab importer.

Importing data using vulnerabilities.importers.gitlab.GitLabGitImporter
Unknow package type 'conan'
Unknow package type 'conan'
...
Unknow package type 'conan'
Unknow package type 'conan'
Unknow package type 'go'
....
Unknow package type 'go'
Unknow package type 'go'
....
parse_yaml_file: affected_range is not parsable: '(,)' type:'nuget' error: InvalidVersion("'None' is not a valid <class 'univers.versions.NugetVersion'>")
 Traceback (most recent call last):
  File "/home/ziad/PycharmProjects/vulnerablecode/vulnerabilities/importers/gitlab.py", line 223, in parse_gitlab_advisory
    affected_version_range = vrc.from_native(affected_range)
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 616, in from_native
    VersionConstraint(comparator="=", version=cls.version_class(str(lower_bound)))
  File "<attrs generated init univers.versions.NugetVersion>", line 7, in __init__
    self.__attrs_post_init__()
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/versions.py", line 87, in __attrs_post_init__
    raise InvalidVersion(f"{self.string!r} is not a valid {self.__class__!r}")
univers.versions.InvalidVersion: 'None' is not a valid <class 'univers.versions.NugetVersion'>

parse_yaml_file: affected_range is not parsable: '[4.0.0],(,3.4.0),[4.0.0,4.1.2)' type:'nuget' error: VersionRangeParseError('Ranges overlap: [4.0.0],(,3.4.0),[4.0.0,4.1.2)')
 Traceback (most recent call last):
  File "/home/ziad/PycharmProjects/vulnerablecode/vulnerabilities/importers/gitlab.py", line 223, in parse_gitlab_advisory
    affected_version_range = vrc.from_native(affected_range)
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 605, in from_native
    restrictions = maven.VersionRange(string).restrictions
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
    raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [4.0.0],(,3.4.0),[4.0.0,4.1.2)

parse_yaml_file: affected_range is not parsable: '[2.2],[2.1]' type:'nuget' error: VersionRangeParseError('Ranges overlap: [2.2],[2.1]')
 Traceback (most recent call last):
  File "/home/ziad/PycharmProjects/vulnerablecode/vulnerabilities/importers/gitlab.py", line 223, in parse_gitlab_advisory
    affected_version_range = vrc.from_native(affected_range)
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 605, in from_native
    restrictions = maven.VersionRange(string).restrictions
  File "/home/ziad/PycharmProjects/vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
    raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [2.2],[2.1]
.....

Successfully imported data using vulnerabilities.importers.gitlab.GitLabGitImporter

ziadhany avatar Sep 24 '22 23:09 ziadhany

Please rebase with the latest main

TG1999 avatar Oct 10 '22 14:10 TG1999