Make GitHub importer have consistent style, by replacing double inverted commas to single inverted commas

Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>

Author: sbs2001

vulnerabilities/importers/github.py

@@ -6,14 +6,14 @@
 # You may not use this software except in compliance with the License.
 # You may obtain a copy of the License at: http://apache.org/licenses/LICENSE-2.0
 # Unless required by applicable law or agreed to in writing, software distributed
-# under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+# under the License is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES OR
 # CONDITIONS OF ANY KIND, either express or implied. See the License for the
 # specific language governing permissions and limitations under the License.
 #
 # When you publish or redistribute any data created with VulnerableCode or any VulnerableCode
 # derivative work, you must accompany this data with the following acknowledgment:
 #
-#  Generated with VulnerableCode and provided on an "AS IS" BASIS, WITHOUT WARRANTIES
+#  Generated with VulnerableCode and provided on an 'AS IS' BASIS, WITHOUT WARRANTIES
 #  OR CONDITIONS OF ANY KIND, either express or implied. No content created from
 #  VulnerableCode should be considered or used as legal advice. Consult an Attorney
 #  for any legal advice.
@@ -43,8 +43,8 @@
 # set of all possible values of first '%s' = {'MAVEN','COMPOSER', 'NUGET'}
 # second '%s' is interesting, it will have the value '' for the first request,
 # since we don't have any value for endCursor at the beginning
-# for all the subsequent requests it will have value 'after: "{endCursor}"'
-query = """
+# for all the subsequent requests it will have value 'after: "{endCursor}""
+query = '''
         query MyQuery {
         securityVulnerabilities(first: 100, ecosystem: %s, %s) {
             edges {
@@ -68,7 +68,7 @@
             }
         }
         }
-        """
+        '''
 
 
 class GitHubTokenError(Exception):
@@ -88,9 +88,9 @@ class GitHubAPIDataSource(DataSource):
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
         try:
-            self.gh_token = os.environ["GH_TOKEN"]
+            self.gh_token = os.environ['GH_TOKEN']
         except KeyError:
-            raise GitHubTokenError("Envirnomental variable GH_TOKEN is missing")
+            raise GitHubTokenError('Envirnomental variable GH_TOKEN is missing')
 
     def __enter__(self):
         self.advisories = self.fetch()
@@ -100,64 +100,65 @@ def updated_advisories(self) -> Set[Advisory]:
 
     def fetch(self) -> Mapping[str, List[Mapping]]:
 
-        headers = {"Authorization": "token " + self.gh_token}
+        headers = {'Authorization': 'token ' + self.gh_token}
         api_data = {}
         for ecosystem in self.config.ecosystems:
 
             api_data[ecosystem] = []
-            end_cursor_exp = ""
+            end_cursor_exp = ''
 
             while True:
 
-                query_json = {"query": query % (ecosystem, end_cursor_exp)}
+                query_json = {'query': query % (ecosystem, end_cursor_exp)}
                 resp = requests.post(
                     self.config.endpoint, headers=headers, json=query_json
                 ).json()
 
-                if resp.get("message") == "Bad credentials":
-                    raise GitHubTokenError("Invalid GitHub token")
+                if resp.get('message') == 'Bad credentials':
+                    raise GitHubTokenError('Invalid GitHub token')
 
-                end_cursor = resp["data"]["securityVulnerabilities"]["pageInfo"][
-                    "endCursor"
+                end_cursor = resp['data']['securityVulnerabilities']['pageInfo'][
+                    'endCursor'
                 ]
-                end_cursor_exp = "after: {}".format('"{}"'.format(end_cursor))
+                end_cursor_exp = 'after: {}'.format('"{}"'.format(end_cursor))
                 api_data[ecosystem].append(resp)
+                print(resp)
 
-                if not resp["data"]["securityVulnerabilities"]["pageInfo"][
-                    "hasNextPage"
+                if not resp['data']['securityVulnerabilities']['pageInfo'][
+                    'hasNextPage'
                 ]:
                     break
         return api_data
 
     def set_version_api(self, ecosystem: str) -> None:
 
-        if ecosystem == "MAVEN":
+        if ecosystem == 'MAVEN':
             self.version_api = MavenVersionAPI()
 
-        elif ecosystem == "NUGET":
+        elif ecosystem == 'NUGET':
             self.version_api = NugetVersionAPI()
 
-        elif ecosystem == "COMPOSER":
+        elif ecosystem == 'COMPOSER':
             self.version_api = ComposerVersionAPI()
 
     @staticmethod
     def process_name(
         ecosystem: str, pkg_name: str
     ) -> Optional[Tuple[Optional[str], str]]:
 
-        if ecosystem == "MAVEN":
+        if ecosystem == 'MAVEN':
 
-            artifact_comps = pkg_name.split(":")
+            artifact_comps = pkg_name.split(':')
             if len(artifact_comps) != 2:
                 return
             ns, name = artifact_comps
             return ns, name
 
-        if ecosystem == "NUGET":
+        if ecosystem == 'NUGET':
             return None, pkg_name
 
-        if ecosystem == "COMPOSER":
-            vendor, name = pkg_name.split("/")
+        if ecosystem == 'COMPOSER':
+            vendor, name = pkg_name.split('/')
             return vendor, name
 
     def process_response(self) -> List[Advisory]:
@@ -166,14 +167,14 @@ def process_response(self) -> List[Advisory]:
             self.set_version_api(ecosystem)
             pkg_type = ecosystem.lower()
             for resp_page in self.advisories[ecosystem]:
-                for adv in resp_page["data"]["securityVulnerabilities"]["edges"]:
-                    name = adv["node"]["package"]["name"]
+                for adv in resp_page['data']['securityVulnerabilities']['edges']:
+                    name = adv['node']['package']['name']
 
                     if self.process_name(ecosystem, name):
                         ns, pkg_name = self.process_name(ecosystem, name)
                     else:
                         continue
-                    aff_range = adv["node"]["vulnerableVersionRange"]
+                    aff_range = adv['node']['vulnerableVersionRange']
                     self.version_api.load_to_api(name)
                     aff_vers, unaff_vers = self.categorize_versions(
                         aff_range, self.version_api.get(name)
@@ -195,13 +196,13 @@ def process_response(self) -> List[Advisory]:
 
                     cve_ids = set()
                     ref_ids = set()
-                    vuln_desc = adv["node"]["advisory"]["summary"]
+                    vuln_desc = adv['node']['advisory']['summary']
 
-                    for vuln in adv["node"]["advisory"]["identifiers"]:
-                        if vuln["type"] == "CVE":
-                            cve_ids.add(vuln["value"])
+                    for vuln in adv['node']['advisory']['identifiers']:
+                        if vuln['type'] == 'CVE':
+                            cve_ids.add(vuln['value'])
                         else:
-                            ref_ids.add(vuln["value"])
+                            ref_ids.add(vuln['value'])
                     for cve_id in cve_ids:
                         adv_list.append(
                             Advisory(
@@ -237,13 +238,13 @@ def load_to_api(self, pkg_name: str) -> None:
         if pkg_name in self.cache:
             return
 
-        artifact_comps = pkg_name.split(":")
+        artifact_comps = pkg_name.split(':')
         endpoint = self.artifact_url(artifact_comps)
         resp = requests.get(endpoint).content
 
         try:
 
-            xml_resp = ET.ElementTree(ET.fromstring(resp.decode("utf-8")))
+            xml_resp = ET.ElementTree(ET.fromstring(resp.decode('utf-8')))
             self.cache[pkg_name] = self.extract_versions(xml_resp)
 
         except ET.ParseError:
@@ -252,10 +253,10 @@ def load_to_api(self, pkg_name: str) -> None:
     @staticmethod
     def artifact_url(artifact_comps: List[str]) -> str:
 
-        base_url = "https://repo.maven.apache.org/maven2/{}"
+        base_url = 'https://repo.maven.apache.org/maven2/{}'
         group_id, artifact_id = artifact_comps
-        group_url = group_id.replace(".", "/")
-        suffix = group_url + "/" + artifact_id + "/" + "maven-metadata.xml"
+        group_url = group_id.replace('.', '/')
+        suffix = group_url + '/' + artifact_id + '/' + 'maven-metadata.xml'
         endpoint = base_url.format(suffix)
 
         return endpoint
@@ -265,7 +266,7 @@ def extract_versions(xml_response: ET.ElementTree) -> Set[str]:
 
         all_versions = set()
         for child in xml_response.getroot().iter():
-            if child.tag == "version":
+            if child.tag == 'version':
                 all_versions.add(child.text)
 
         return all_versions
@@ -294,15 +295,15 @@ def load_to_api(self, pkg_name: str) -> None:
 
     @staticmethod
     def nuget_url(pkg_name: str) -> str:
-        base_url = "https://api.nuget.org/v3/registration5-semver1/{}/index.json"
+        base_url = 'https://api.nuget.org/v3/registration5-semver1/{}/index.json'
         return base_url.format(pkg_name.lower())
 
     @staticmethod
     def extract_versions(json_resp: dict) -> Set[str]:
         all_versions = set()
         try:
-            for entry in json_resp["items"][0]["items"]:
-                all_versions.add(entry["catalogEntry"]["version"])
+            for entry in json_resp['items'][0]['items']:
+                all_versions.add(entry['catalogEntry']['version'])
         # json response for YamlDotNet.Signed triggers this exception
         except KeyError:
             return all_versions
@@ -326,16 +327,16 @@ def load_to_api(self, pkg_name: str) -> None:
 
     @staticmethod
     def composer_url(pkg_name: str) -> str:
-        vendor, name = pkg_name.split("/")
-        return f"https://repo.packagist.org/p/{vendor}/{name}.json"
+        vendor, name = pkg_name.split('/')
+        return f'https://repo.packagist.org/p/{vendor}/{name}.json'
 
     @staticmethod
     def extract_versions(json_resp: dict, pkg_name: str) -> Set[str]:
-        all_versions = json_resp["packages"][pkg_name].keys()
+        all_versions = json_resp['packages'][pkg_name].keys()
         # This filter ensures, that all_versions contains only released versions
-        all_versions = set(filter(lambda x: "dev" not in x, all_versions))
+        all_versions = set(filter(lambda x: 'dev' not in x, all_versions))
         # See https://github.com/composer/composer/blob/44a4429978d1b3c6223277b875762b2930e83e8c/doc/articles/versions.md#tags  # nopep8
         # for explanation of removing 'v'
-        all_versions = set(map(lambda x: x.replace("v", ""), all_versions))
+        all_versions = set(map(lambda x: x.replace('v', ''), all_versions))
 
         return all_versions