Skip to content

feat: add Azure Linux ecosystem#5043

Open
JamieMagee wants to merge 1 commit intogoogle:masterfrom
JamieMagee:azure-linux
Open

feat: add Azure Linux ecosystem#5043
JamieMagee wants to merge 1 commit intogoogle:masterfrom
JamieMagee:azure-linux

Conversation

@JamieMagee
Copy link

Overview

Adds Azure Linux as a queryable ecosystem so the API can match pkg:rpm/azure-linux/ PURLs to AZL-* vulnerability records.

Ref: #5041

Details

Azure Linux is an RPM-based distro, so this reuses the existing RPM ecosystem helper (no new version-comparison logic needed).

Changes:

  • _ecosystems.py: registered 'Azure Linux': RPM
  • purl_helpers.py: added PURL mapping pkg:rpm/azure-linux/<package>
  • ecosystem.go: added osvconstants.EcosystemAzureLinux -> rpmEcosystem

Ecosystem name (Azure Linux) and PURL namespace (azure-linux) match the published vulnerability data at https://github.com/microsoft/AzureLinuxVulnerabilityData and the schema PR ossf/osv-schema#498.

Testing

  • Added forward and reverse PURL conversion tests in purl_helpers_test.py
  • Added 'Azure Linux' to the RPM ecosystem list in redhat_test.py
  • Added a Go version-parsing test case in wrapper_test.go (TestZeroVersion)

Register Azure Linux as an RPM-based ecosystem in both Python and Go.
Uses \`pkg:rpm/azure-linux/<package>\` for PURL mapping, reuses the
existing RPM version helper. Adds tests for PURL conversion and
version parsing.

Ref: google#5041
@gemini-code-assist
Copy link
Contributor

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@google-cla
Copy link

google-cla bot commented Mar 13, 2026

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@JamieMagee JamieMagee mentioned this pull request Mar 13, 2026
6 tasks
Copy link
Contributor

@another-rex another-rex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, though we might need to wait a few days to get this merged in.

@another-rex
Copy link
Contributor

Can you have a look at the CLA check as well? Thanks!

@another-rex
Copy link
Contributor

/gcbrun

@JamieMagee
Copy link
Author

Can you have a look at the CLA check as well? Thanks!

I forgot to hit rescan. Looks good now!

@another-rex
Copy link
Contributor

another-rex commented Mar 17, 2026

Thanks! The CI failures is due to some issues on our end, unrelated to the changes in this PR, we'll get that fixed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants