mirror of
https://github.com/clearlinux/cve-check-tool.git
synced 2026-09-06 21:51:33 +00:00
55 lines
2.1 KiB
Plaintext
55 lines
2.1 KiB
Plaintext
TODO List
|
|
---------
|
|
|
|
cve-check-tool has achieved minimal functionality, which as come at a
|
|
cost. A refactor will be needed to bring performance and flexibility
|
|
up to par.
|
|
|
|
In essence cve-check-tool is an aggregator of data sources, performing
|
|
a cross-reference to determine whether the final user (distribution) is
|
|
affected by a CVE.
|
|
|
|
Redesign overview:
|
|
|
|
The current primary data source is the NVD DB. However due to the fact
|
|
it is in XML it is extremely expensive to work with. We mitigate this
|
|
for the most part by interweaving cross-reference logic with data checking.
|
|
|
|
Going forward, data sources will be separate plugins to feed the primary
|
|
database. This database will most likely be sqlite3, offering high performance
|
|
read operations.
|
|
|
|
cve-check-tool will pull read-only from its database, cross-referencing
|
|
distro data (whether previously imported or dynamic at runtime) - improving
|
|
performance and vastly reducing code complexity.
|
|
|
|
Data sources and parsers are to be separate from reporters (such as JIRA,
|
|
HTML, CSV) - removing the current interweaving issue.
|
|
|
|
This means splitting the data-import from the cross-check runs:
|
|
|
|
|
|
.---------------------.
|
|
| Package/distro data |
|
|
'---------------------'
|
|
| .------.
|
|
v | CSV |
|
|
(cve-check-tool binary) '------'
|
|
******************* .------.
|
|
* Cross-reference * ----> | HTML | Output
|
|
******************* '------'
|
|
^ .------.
|
|
Data sources | | JIRA |
|
|
| '------'
|
|
.-----. .----------------------.
|
|
| NVD | -- -> | CVE/Central database |
|
|
'-----' '----------------------'
|
|
.-----. ^
|
|
| USN | ---------|
|
|
'-----'
|
|
|
|
|
|
This has many benefits, as the majority of queries we are interested in
|
|
are best supported by database solutions, i.e.
|
|
SELECT * FROM vulnerabilities WHERE product ...
|