NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

support/scripts/pkg-stats: add column reporting ignored CVEs

Browse Source 
When doing analysis it is helpful to be able to view what CVE have
been patched / diagnosed to not apply to Buildroot. This exposes
that list to the reporting and prevents a step where you have to
dig into the .mk's of a pkg to check for sure what has been
ignored.

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: only set background if there are ignored CVEs]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
This commit is contained in:
Matt Weber 2021-04-22 14:45:57 -05:00 committed by Yann E. MORIN
parent c5aa3c5883
commit f3b07e2ded
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
support/scripts/pkg-stats
View File

@ -735,6 +735,10 @@ td.cve-unknown {
background: #ffd870;
}
td.cve_ignored {
background: #ccc;
}
</style>
<title>Statistics of Buildroot packages</title>
</head>
@ -909,6 +913,15 @@ def dump_html_pkg(f, pkg):
f.write(" N/A\n")
f.write(" </td>\n")
# CVEs Ignored
td_class = ["centered"]
if pkg.ignored_cves:
td_class.append("cve_ignored")
f.write(" <td class=\"%s\">\n" % " ".join(td_class))
for ignored_cve in pkg.ignored_cves:
f.write(" <a href=\"https://security-tracker.debian.org/tracker/%s\">%s<br/>\n" % (ignored_cve, ignored_cve))
f.write(" </td>\n")
# CPE ID
td_class = ["left"]
if pkg.is_status_ok("cpe"):
@ -948,6 +961,7 @@ def dump_html_all_pkgs(f, packages):
<td class=\"centered\">Warnings</td>
<td class=\"centered\">Upstream URL</td>
<td class=\"centered\">CVEs</td>
<td class=\"centered\">CVEs Ignored</td>
<td class=\"centered\">CPE ID</td>
</tr>
""")