319 Commits

Author	SHA1	Message	Date
Ryan Mulligan	6d2c8f09c0	[CVE] add filtering, fix terraform CVE issue	2019-11-24 14:28:04 -08:00
Ryan Mulligan	40faec6f89	[CVE] Combine matchers and cpes into cpe matches ... This more directly matches the underlying data structure. Also the code is making better use of the ToRow instance, and gets rid of the uniqueness checks that Lars says are unnecessary.	2019-11-24 06:12:14 -08:00
Ryan Mulligan	5fb671cca6	[CVE] populate a CPE table	2019-11-06 22:13:35 -08:00
Ryan Mulligan	793a933516	make import explicit	2019-11-03 21:45:14 -08:00
Ryan Mulligan	39e9d68102	remove Gnome blacklist ... fixes #131 revert this during the next release season	2019-11-01 06:08:06 -07:00
Ryan Mulligan	3741b7e634	indicate if a CVE has been patched	2019-10-28 07:41:45 -07:00
Ryan Mulligan	78fe5fe745	improve message about updating NVD	2019-10-27 13:09:44 -07:00
Ryan Mulligan	4edfde1895	use correct function for checking number of hashes	2019-10-27 13:09:29 -07:00
Ryan Mulligan	b4b5a6e7ad	ignore derivations containing multiple "sha256 =" ... closes #130	2019-10-27 07:14:34 -07:00
Ryan Mulligan	d51df0b316	remove long description from commit message ... I'm doing this to save space in the nixpkgs git repo.	2019-10-27 06:20:00 -07:00
Ryan Mulligan	c005972fdd	test checking GitHub for new versions	2019-10-12 16:20:16 -07:00
Ryan Mulligan	ab2b5a6b91	add experimental CVE reporting	2019-10-06 16:17:08 -07:00
Ryan Mulligan	990afa0319	Main: add commandline hook into the getCVEs function	2019-10-06 14:16:35 -07:00
Lars Jellema	490d1ed162	Remove feed caching and clean up queries	2019-10-02 17:02:12 +02:00
Lars Jellema	93437182d4	Define a partial order on versions	2019-10-02 15:50:12 +02:00
Lars Jellema	cf54777abd	Properly check if database is out of date	2019-10-02 14:09:52 +02:00
Lars Jellema	eff6deb6d7	Store CVE data in a SQLite database	2019-10-02 14:07:41 +02:00
Lars Jellema	26b11c2025	Store NVD in a SQLite database	2019-10-02 14:04:57 +02:00
Ryan Mulligan	3950aa3f36	CVE,NVD: fix warnings	2019-09-28 09:36:22 -07:00
Ryan Mulligan	f7defb5399	Blacklist: don't update files containing "gnome"	2019-09-26 20:50:22 -07:00
Ryan Mulligan	fbcded8cde	fix hlint warnings	2019-09-26 06:56:49 -07:00
Ryan Mulligan	6fc456e106	Time: fix polysemy names	2019-09-26 06:33:16 -07:00
Ryan Mulligan	226f72c522	minor reformatting	2019-09-26 05:36:15 -07:00
Ryan Mulligan	b867677120	make outpaths.nix exactly match OfBorg	2019-09-26 05:35:57 -07:00
Ryan Mulligan	9b0bdcf9f3	Revert "switch back to old hash splitter" ... This reverts commit 0bd5de1acb.	2019-09-23 21:16:30 -07:00
Ryan Mulligan	d9300946d3	Merge branch 'cve'	2019-09-07 16:53:01 -07:00
Ryan Mulligan	e8aff07494	Merge branch 'master' of github.com:ryantm/nixpkgs-update	2019-09-07 16:48:58 -07:00
Ryan Mulligan	76c8fda52a	Main: refactor so not every command has the same setup dependencies, use commands instead of switches	2019-09-07 16:48:10 -07:00
Ryan Mulligan	abb85845d9	CVE: fix import	2019-09-06 06:25:48 -07:00
Lars Jellema	626633f56d	Add caching and parsing of CVE feeds	2019-09-04 18:07:01 +02:00
Lars Jellema	3240016112	Add basic version matching logic	2019-09-04 17:48:12 +02:00
Jan Tojnar	888232b63c	blacklist: Disable updating GNOME again ... There is now a code freeze, with 3.34.0 tarball deadline on Sep 9, 2019.	2019-09-03 18:09:38 +02:00
Ryan Mulligan	50d346ee6d	Main: remove UpdateMergeBase option which actually did nothing yet	2019-08-24 14:03:30 -07:00
Ryan Mulligan	c8c5a3258e	Update: remove reference to deleted fix src url code	2019-08-24 13:56:07 -07:00
Ryan Mulligan	9a686921ab	remove Shelly dependency!	2019-08-18 15:04:23 -07:00
Ryan Mulligan	a06b1025fc	Clean: remove since it is unused ... also, it contains old ways of getting hashes	2019-08-18 15:00:59 -07:00
Ryan Mulligan	8845a2314f	Check: remove Shelly usage	2019-08-18 14:56:51 -07:00
Ryan Mulligan	0bd5de1acb	switch back to old hash splitter ... In Nix 2.2, the expected hash output seems to have changed back to what it was before.	2019-08-03 15:07:36 -07:00
Ryan Mulligan	398a94e5b3	remove used code in Shell.hs	2019-07-29 21:54:17 -07:00
Ryan Mulligan	2aadc50e6f	add branch prefix ... preparing to rename "auto-update"	2019-07-29 21:51:29 -07:00
Ryan Mulligan	59172c23f3	fix warnings and doctests	2019-07-28 20:23:57 -07:00
Ryan Mulligan	6154f965a0	import doctest dependency in setup	2019-07-27 15:10:15 -07:00
Jan Tojnar	9de209ce3d	blacklist: Allow updating GNOME again ... We have time until September.	2019-06-21 00:12:36 +02:00
Ryan Mulligan	034de250ce	Check: fix passthru.tests build & reformat ... closes #119	2019-06-16 12:48:42 -07:00
Léo Gaspard	cb9bc5c419	Check: build passthru.tests when present	2019-06-11 20:59:55 +02:00
Ryan Mulligan	192342ebdf	Time: add doctests	2019-06-08 14:41:03 -07:00
Ryan Mulligan	b8be0e0689	Blacklist: remove unnecessary IO constraint	2019-06-08 08:36:20 -07:00
Ryan Mulligan	a0dcdacc75	Time: add note about time 1.9 availability	2019-06-08 08:33:45 -07:00
Ryan Mulligan	b844a4b587	Time: use polysemy	2019-06-08 07:24:39 -07:00
Ryan Mulligan	8c66682169	apply hlint suggestions	2019-06-08 05:46:44 -07:00