Skip to content

feat(NVD): have NVD conversion indiscriminately output records regardless of git resolution outcome#4747

Open
jess-lowe wants to merge 13 commits intogoogle:masterfrom
jess-lowe:feat/nvd-version-db
Open

feat(NVD): have NVD conversion indiscriminately output records regardless of git resolution outcome#4747
jess-lowe wants to merge 13 commits intogoogle:masterfrom
jess-lowe:feat/nvd-version-db

Conversation

@jess-lowe
Copy link
Contributor

@jess-lowe jess-lowe commented Feb 4, 2026

This PR:

  • Moves resolving git commits logic into its own function to reduce duplication of logic across OSV/PackageInfo records
  • Indiscriminately outputs NVD-OSV records regardless of whether versions were able to be resolved to commits. Bare versions are saved in the database_specific field. (NOTE: this is currently the high level database_specific field - future work will involve placing these at affected.ranges.database_specific level, but more reworking will need to be done to complete that.
  • Outputs a csv file of CVEID, Outcome mappings for analysis, and refactored to focus on Conversion Outcome rather than errors.

}

if rejectFailed && metrics.Outcome != models.Successful {
return metrics.Outcome
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it intentional that we don't write the metrics file if outcome fails? e.g. there are no affected commits

Can you add a comment here stating that if it is intentional and why.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants