This is an automated email from the ASF dual-hosted git repository.
epugh pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/solr-site.git
from 1752d8090 Merge pull request #205 from
epugh/add_lower_bounds_to_versions
add 64f0f83d6 Generate openvex from our cyclonedx inspired vex files.
add a463d3b25 List out each version of Solr that a VEX statement applies
to. Only works with lower bounded statements.
add d8b2ecc3f Openvex file being generated, though with hardcoded mappings.
add 481d358a5 Document how to use vex files with docker scout command.
add 358e841e9 as part of adding more netty cves, we added more of these
mappings. Ugh.
add 55d165804 Eliminate hardcoded JAR_GROUPS by using the current
generated file.
add 9fdcc3ad8 modules: solr-core or solr-solrj support. Omitting means
solr-core.
add 230171330 Demonstate using 'syft' tool to generate sbom that populates
the solr version mapping file.
add 56554beaf Merge remote-tracking branch 'upstream/main' into
add_openvex_support
add 194b79deb Merge remote-tracking branch 'upstream/main' into
add_openvex_support
add b22617ad0 Nicer variable name, be clear what we are doing.
add 2e3ba6c0b Reduces future error of omission by building in updating
this as part of regen fro solr 9 and later releases. Pre 9 is static.
add a49ddfda2 strip out the scanning of -slim version of solr, that
doesn't help us at all!
add cb01a37bf Document the vex steps.
new 6bb766605 Merge pull request #204 from epugh/add_openvex_support
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
README.md | 46 +
build.sh | 22 +
content/pages/security-dependency-cves.md | 17 +-
plugins/vex/regenerate_dependency_mappings.py | 308 ++
plugins/vex/schema/openvex_json_schema.json | 317 ++
plugins/vex/schema/vex_article.schema.yaml | 9 +
plugins/vex/solr-dependency-versions.json | 3252 ++++++++++++++++++++
plugins/vex/solr-versions.txt | 128 +
plugins/vex/vex.py | 271 ++
.../solr/templates/security-dependency-cves.html | 3 +-
10 files changed, 4371 insertions(+), 2 deletions(-)
create mode 100644 plugins/vex/regenerate_dependency_mappings.py
create mode 100644 plugins/vex/schema/openvex_json_schema.json
create mode 100644 plugins/vex/solr-dependency-versions.json
create mode 100644 plugins/vex/solr-versions.txt
