Conversation
Register Azure Linux as an RPM-based ecosystem in both Python and Go. Uses \`pkg:rpm/azure-linux/<package>\` for PURL mapping, reuses the existing RPM version helper. Adds tests for PURL conversion and version parsing. Ref: google#5041
|
Warning You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again! |
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
another-rex
left a comment
There was a problem hiding this comment.
LGTM, though we might need to wait a few days to get this merged in.
|
Can you have a look at the CLA check as well? Thanks! |
|
/gcbrun |
I forgot to hit rescan. Looks good now! |
|
Thanks! The CI failures is due to some issues on our end, unrelated to the changes in this PR, we'll get that fixed! |
Overview
Adds Azure Linux as a queryable ecosystem so the API can match
pkg:rpm/azure-linux/PURLs toAZL-*vulnerability records.Ref: #5041
Details
Azure Linux is an RPM-based distro, so this reuses the existing
RPMecosystem helper (no new version-comparison logic needed).Changes:
'Azure Linux': RPMpkg:rpm/azure-linux/<package>osvconstants.EcosystemAzureLinux->rpmEcosystemEcosystem name (
Azure Linux) and PURL namespace (azure-linux) match the published vulnerability data at https://github.com/microsoft/AzureLinuxVulnerabilityData and the schema PR ossf/osv-schema#498.Testing
'Azure Linux'to the RPM ecosystem list in redhat_test.pyTestZeroVersion)