From dc778614b8682b26a5327d930ddf7e0430ccfd8f Mon Sep 17 00:00:00 2001 From: yangwei999 <348134071@qq.com> Date: Mon, 15 Jul 2024 14:26:03 +0800 Subject: [PATCH] cve level by openeuler score --- cve-vulner-manager/controllers/hook.go | 2 ++ cve-vulner-manager/taskhandler/common.go | 6 +----- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/cve-vulner-manager/controllers/hook.go b/cve-vulner-manager/controllers/hook.go index 2a60429..fce3df2 100644 --- a/cve-vulner-manager/controllers/hook.go +++ b/cve-vulner-manager/controllers/hook.go @@ -1765,6 +1765,8 @@ func analysisComment(owner, accessToken, path string, cuAccount string, cBody st } issueTmp.OpenEulerScore = fv cols = append(cols, k) + // Dominated by openeuler score, update cve level + issueTmp.CveLevel = models.OpenEulerScoreProc(fv) } case "openeuler_vector": if v != "" && len(v) > 1 { diff --git a/cve-vulner-manager/taskhandler/common.go b/cve-vulner-manager/taskhandler/common.go index 4d197b7..07b3a3d 100644 --- a/cve-vulner-manager/taskhandler/common.go +++ b/cve-vulner-manager/taskhandler/common.go @@ -904,10 +904,6 @@ func CreateIssueBody(accessToken, owner, path, assignee string, if err != nil { floatOpenEulerScore = 0.0 } - nvdScore, err := strconv.ParseFloat(score, 64) - if err != nil { - nvdScore = 0.0 - } cveAnalysis := "" if its.CveAnalysis != "" && len(its.CveAnalysis) > 1 { cveAnalysis = strings.Replace(its.CveAnalysis, "\n", "", -1) @@ -983,7 +979,7 @@ func CreateIssueBody(accessToken, owner, path, assignee string, cvePkg := fmt.Sprintf("[%s](https://gitee.com/%s/%s)", cve.PackName, owner, path) cveRepo := fmt.Sprintf("[%s](https://gitee.com/%s/%s)", cve.RepoName, owner, path) cve.CveDetailUrl = "https://nvd.nist.gov/vuln/detail/" + cve.CveNum - cve.CveLevel = models.OpenEulerScoreProc(nvdScore) + cve.CveLevel = models.OpenEulerScoreProc(its.OpenEulerScore) if len(cve.CveVersion) > 0 && cve.CveVersion[0] == ',' { cve.CveVersion = cve.CveVersion[1:] } -- Gitee