sumeet patil

There is a bug in KB-Importer. The nvd service does not work to get the description as the CVE URL is not configured. https://github.com/eclipse/steady/blob/bae49b39b3f82553d49c2d1c0480c3e44de1bf0a/lang/src/main/java/org/eclipse/steady/backend/BackendConnector.java#L1624

For python, __init__ files are to be checked out as part of the shell script

2

When we do a kaybee export for steady with a statement containing python Vulnerability, steady also needs `__init__` files to be checkout as part of the bash generated script. These...

export to Steady: the script does not delete local clones of repositories

1

The temporary cloned repositories take a lot of space. Delete it as soon it is consumed by KB-Importer https://github.com/SAP/project-kb/blob/master/kaybee/internal/tasks/data/default_config.yaml

Import specific vulnerabilities

1

There can be a scenario where a user wants to import specific vulnerabilities. I saw that there is no import capability where users can import specific vulnerabilities. It has -n...

Validate kaybee statements

2

Kaybee statements should be validated automatically when we create a pull request I can think of these basic validations - 1. Validate Git Commit Id 2. Validate Git branch 3....

kaybee merge take long even with one single repository configured

5

OS: macOS kaybee merge take long even with one single repository **kaybee version 0.6.15** I used the git cloned file system to do the tests. kaybeeconf.yaml contains one single repo...