Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

helpers*sh: Add a primitive cpesearch function #1480

Merged
merged 2 commits into from
Jan 31, 2024
Merged

helpers*sh: Add a primitive cpesearch function #1480

merged 2 commits into from
Jan 31, 2024

Conversation

ermo
Copy link
Contributor

@ermo ermo commented Jan 31, 2024

This can be useful when looking up the correct CPE $PRODUCT:$VENDOR pair for monitoring.yml purpurses and for manually searching for known CVEs.

This commit only adds a PoC bash script helper.

Example output:

$ cpesearch zlib
[
  [
    109789,
    "cpe:2.3:a:zlib:pigz"
  ],
  [
    111701,
    "cpe:2.3:a:gnu:zlib"
  ],
  [
    117793,
    "cpe:2.3:a:zlib:zlib"
  ]
]
Verify successful hits by visiting https://cve.circl.lu/search/$VENDOR/$PRODUCT
- CPE entries for software applications have the form 'cpe:2.3:a:$VENDOR:$PRODUCT'

ermo added 2 commits January 30, 2024 17:47
This can be useful when looking up the correct CPE $PRODUCT:$VENDOR pair
for monitoring.yml purpurses and for manually searching for known CVEs.

This commit only adds a PoC bash script helper.

Signed-off-by: Rune Morling <[email protected]>
@ermo ermo requested a review from davidjharder January 31, 2024 19:25
@ermo ermo added Priority: Normal Normal priority Type: Feature Something can be enhanced. Topic: Tooling Tools and scripts labels Jan 31, 2024
@ermo ermo added this to the Solus 4.6 milestone Jan 31, 2024
Copy link
Member

@davidjharder davidjharder left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • Works as expected
  • Dies reasonably if you don't have jq installed

@davidjharder davidjharder merged commit 34cf5c3 into main Jan 31, 2024
2 checks passed
@davidjharder davidjharder deleted the cpesearch branch January 31, 2024 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Priority: Normal Normal priority Topic: Tooling Tools and scripts Type: Feature Something can be enhanced.
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants