Repository navigation
fedcode-next: Extract fix commits from the commit logs in search for CVE-related commit messages #2000
Description
Activity
This has been completed. We now have a new importer named "collect_fix_commits" that does the job. It has been merged with this PR:
We further fine tune the pipeline on the list of project listed below.
See the collected commits attached for reference:
vulnerabilities_packagecommitpatch.zipThese are the repositories we use to fine tune the data collection:
- Linux Kernel: https://github.com/torvalds/linux
- BusyBox: https://github.com/mirror/busybox.git
- Nginx: https://github.com/nginx/nginx.git
- Apache Tomcat: https://github.com/apache/tomcat.git
- MySQL Server: https://github.com/mysql/mysql-server.git
- PostgreSQL: https://github.com/postgres/postgres.git
- MongoDB: https://github.com/mongodb/mongo.git
- Redis: https://github.com/redis/redis.git
- SQLite: https://github.com/sqlite/sqlite.git
- PHP: https://github.com/php/php-src.git
- Python (CPython): https://github.com/python/cpython.git
- Ruby: https://github.com/ruby/ruby.git
- Go (Golang): https://github.com/golang/go.git
- Node.js: https://github.com/nodejs/node.git
- Rust: https://github.com/rust-lang/rust.git
- OpenJDK (Java): https://github.com/openjdk/jdk.git
- Swift: https://github.com/swiftlang/swift.git
- Django: https://github.com/django/django.git
- Rails: https://github.com/rails/rails.git
- Laravel: https://github.com/laravel/framework.git
- Spring Framework: https://github.com/spring-projects/spring-framework.git
- React: https://github.com/facebook/react
- Angular: https://github.com/angular/angular
- WordPress: https://github.com/WordPress/WordPress.git
- Docker (Moby): https://github.com/moby/moby.git
- Kubernetes: https://github.com/kubernetes/kubernetes.git
- QEMU: https://gitlab.com/qemu-project/qemu.git
- Xen Project: https://github.com/xen-project/xen.git
- VirtualBox: https://github.com/mirror/vbox.git
- Containerd: https://github.com/containerd/containerd.git
- Ansible: https://github.com/ansible/ansible.git
- Terraform: https://github.com/hashicorp/terraform.git
- Wireshark: https://gitlab.com/wireshark/wireshark.git
- Tcpdump: https://github.com/the-tcpdump-group/tcpdump.git
- Git: https://github.com/git/git.git
- Jenkins: https://github.com/jenkinsci/jenkins.git
- GitLab (Community Edition): https://gitlab.com/gitlab-org/gitlab-foss.git
There is further work that will continue for this feature in:
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
- Status
We should create a pipeline that extract fix commits by parsing commit messages there is multiple way we for doing that
CVE-\d{4}-\d{4,7}Tools Using Similar Approaches to Parse Git Commit Messages: