add a cron job for triage evalution

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

dejacode/settings.py

@@ -479,6 +479,7 @@ def gettext_noop(s):
 hourly = "0 * * * *"
 DEJACODE_VULNERABILITIES_CRON = env.str("DEJACODE_VULNERABILITIES_CRON", default=daily_at_3am)
 DEJACODE_POLICY_RULES_CRON = env.str("DEJACODE_POLICY_RULES_CRON", default=hourly)
+DEJACODE_VULNERABILITY_TRIAGE_CRON = env.str("DEJACODE_VULNERABILITY_TRIAGE_CRON", default=hourly)
 
 
 def enable_rq_eager_mode():

dje/cron_jobs.py

@@ -12,19 +12,28 @@
 
 from dje.tasks import update_vulnerabilities
 from policy.tasks import evaluate_all_products_rules_task
+from vulnerabilities.triage.tasks import evaluate_all_products_vulnerability_triage_task
 
-two_hour = 7200
+two_hours = 7200
+ten_minutes = 600
 
 cron.register(
     func=update_vulnerabilities,
     queue_name="default",
     cron=settings.DEJACODE_VULNERABILITIES_CRON,  # Daily at 3am by default
-    job_timeout=two_hour,
+    job_timeout=two_hours,
 )
 
 cron.register(
     func=evaluate_all_products_rules_task,
     queue_name="default",
     cron=settings.DEJACODE_POLICY_RULES_CRON,  # Hourly by default
-    job_timeout=two_hour,
+    job_timeout=ten_minutes,
+)
+
+cron.register(
+    func=evaluate_all_products_vulnerability_triage_task,
+    queue_name="default",
+    cron=settings.DEJACODE_VULNERABILITY_TRIAGE_CRON,  # Hourly by default
+    job_timeout=ten_minutes,
 )

vulnerabilities/triage/tasks.py

@@ -0,0 +1,42 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# DejaCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: AGPL-3.0-only
+# See https://github.com/aboutcode-org/dejacode for support or download.
+# See https://aboutcode.org for more information about AboutCode FOSS projects.
+#
+
+import logging
+
+from django_rq import job
+
+from vulnerabilities.triage.engine import evaluate_ruleset
+from vulnerabilities.triage.models import ProductTriageRuleset
+
+logger = logging.getLogger(__name__)
+
+
+@job
+def evaluate_all_products_vulnerability_triage_task():
+    """Evaluate all enabled triage rulesets against their assigned products."""
+    assignments = (
+        ProductTriageRuleset.objects.filter(ruleset__enabled=True)
+        .select_related("product", "ruleset", "dataspace")
+        .order_by("dataspace__name", "product__name", "product__version", "-ruleset__precedence")
+    )
+
+    count = assignments.count()
+    logger.info(f"Starting triage evaluation for {count} ruleset assignment(s).")
+
+    for assignment in assignments:
+        logger.info(f"Evaluating triage ruleset {assignment.ruleset} for {assignment.product}")
+        try:
+            evaluate_ruleset(ruleset=assignment.ruleset, product=assignment.product)
+        except Exception:
+            logger.exception(
+                f"Triage evaluation failed for {assignment.ruleset} / {assignment.product},"
+                " skipping."
+            )
+            continue
+
+    logger.info("Triage evaluation complete.")