Skip to content

Fix OSV to handle affected_packages correctly & add support to collect commits #2080

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
ziadhany wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Fix OSV to handle affected_packages correctly & add support to collect commits #2080

ziadhany wants to merge 6 commits into from

Conversation

@ziadhany
Copy link
Collaborator

@ziadhany ziadhany commented Dec 23, 2025 •
edited
Loading

Issue:

@ziadhany
Fix OSV to handel affected_packages correctly
82949e7 
Add support to collect commits

Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany
Add more tests.
058a6f3 
Use parse_advisory_data_v3 for GitHub OSV.

Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany
Fix the test for osv pipelines
85d2b53 
Update the function docs osv_v2

Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany
Fix the test for osv pipelines
4c46a98 
Fix CVSSv4 vector length issue

Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany
Update OSV migration file
ab084af 
Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany ziadhany marked this pull request as ready for review December 24, 2025 10:47
@ziadhany
Update OSV to simplify the affected/fixed package constraints
29003da 
Signed-off-by: ziad hany <ziadhany2016@gmail.com>
@ziadhany
Copy link
Collaborator Author

ziadhany commented Dec 24, 2025 •
edited
Loading

OSV Logs , importers:

  • pypa_importer_v2
  • pysec_importer_v2
  • oss_fuzz_importer_v2
  • github_osv_importer_v2

osv_logs.zip

Also , There is still a small bug regarding invalid constraints sequence, I’m trying to find a solution for it.
ex:

univers.version_constraint.InvalidConstraintsError: Invalid constraints sequence: ('>= 2.6','>= 2.7') in [VersionConstraint(comparator='<', version=PypiVersion(string='2.5.11')), VersionConstraint(comparator='>=', version=PypiVersion(string='2.6')), VersionConstraint(comparator='>=', version=PypiVersion(string='2.7'))]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ziadhany