Add a link to the VulnerableCode app in the Vulnerability tab #4 (#69)

Signed-off-by: tdruez <tdruez@nexb.com>

Author: tdruez

CHANGELOG.rst

@@ -31,6 +31,9 @@ Release notes
 - Refactor the "Import manifest" feature as "Load SBOMs".
   https://github.com/nexB/dejacode/issues/61
 
+- Add a vulnerability link to the VulnerableCode app in the Vulnerability tab.
+  https://github.com/nexB/dejacode/issues/4
+
 ### Version 5.0.1
 
 - Improve the stability of the "Check for new Package versions" feature.

component_catalog/tests/test_views.py

@@ -3202,9 +3202,11 @@ def test_package_details_view_get_vulnerability_fields(self):
         fields = get_vulnerability_fields(vulnerability={}, dataspace=self.dataspace)
         self.assertEqual(fields[0], ("Summary", None, "Summary of the vulnerability"))
 
+        vulnerability_url = "http://public.vulnerablecode.io/vulnerabilities/VCID-pk3r-ga7k-aaap"
         vulnerability = {
-            "vulnerability_id": "42d0a7c4-99e9-4506-b0c6-338ec2993147",
+            "vulnerability_id": "VCID-pk3r-ga7k-aaap",
             "summary": "SQL Injection",
+            "resource_url": vulnerability_url,
             "references": [
                 {
                     "reference_id": "",
@@ -3227,8 +3229,11 @@ def test_package_details_view_get_vulnerability_fields(self):
             dataspace=self.dataspace,
         )
         self.assertEqual(fields[0], ("Summary", "SQL Injection", "Summary of the vulnerability"))
-        self.assertEqual(fields[1][0], "Fixed packages")
-        fixed_package_values = fields[1][1]
+        self.assertEqual(fields[1][0], "VulnerableCode URL")
+        url_as_link = f'<a href="{vulnerability_url}" target="_blank">{vulnerability_url}</a>'
+        self.assertEqual(fields[1][1], url_as_link)
+        self.assertEqual(fields[2][0], "Fixed packages")
+        fixed_package_values = fields[2][1]
         self.assertIn("nginx/nginx@1.10.1", fixed_package_values)
         self.assertIn(
             '<a href="/packages/add/?package_url=pkg:nginx/nginx@1.10.1"',
@@ -3239,7 +3244,7 @@ def test_package_details_view_get_vulnerability_fields(self):
             fixed_package_values,
         )
         self.assertEqual(
-            fields[2][0:2],
+            fields[3][0:2],
             (
                 "Reference IDs",
                 '<a href="https://nvd.nist.gov/vuln/detail/CVE-2022-23305" target="_blank">'
@@ -3248,7 +3253,7 @@ def test_package_details_view_get_vulnerability_fields(self):
             ),
         )
         self.assertEqual(
-            fields[3][0:2],
+            fields[4][0:2],
             (
                 "Reference URLs",
                 '<a target="_blank" href="http://www.openwall.com/lists/oss-security/2022/01/18/4" '

component_catalog/views.py

@@ -312,6 +312,14 @@ def get_vulnerability_fields(vulnerability, dataspace):
             (_("Summary"), summary, "Summary of the vulnerability"),
         ]
 
+        if vulnerability_url := vulnerability.get("resource_url"):
+            vulnerability_url_help = "Link to the VulnerableCode app."
+            url_as_link = format_html(
+                '<a href="{vulnerability_url}" target="_blank">{vulnerability_url}</a>',
+                vulnerability_url=vulnerability_url,
+            )
+            tab_fields.append((_("VulnerableCode URL"), url_as_link, vulnerability_url_help))
+
         if include_fixed_packages:
             fixed_packages = vulnerability.get("fixed_packages", [])
             fixed_packages_sorted = natsorted(fixed_packages, key=itemgetter("purl"))