Skip to content

Commit 2318841

Browse files
committed
add multiple affected version ranges to tests
Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
1 parent 022c755 commit 2318841

2 files changed

Lines changed: 244 additions & 27 deletions

File tree

vulnerabilities/importers/github.py

Lines changed: 17 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -501,16 +501,24 @@ def get_inferences(self, advisory_data: AdvisoryData) -> Iterable[Inference]:
501501
vulnerable_packages=affected_purls, resolved_packages=unaffected_purls
502502
)
503503

504-
unique_patched_packages = []
504+
unique_patched_packages_with_affected_packages = {}
505505
for package in affected_packages:
506-
if package.patched_package not in unique_patched_packages:
507-
unique_patched_packages.append(package.patched_package)
508-
yield Inference.from_advisory_data(
509-
advisory_data,
510-
confidence=90,
511-
affected_purls=affected_purls,
512-
fixed_purl=package.patched_package,
513-
)
506+
if package.patched_package not in unique_patched_packages_with_affected_packages:
507+
unique_patched_packages_with_affected_packages[package.patched_package] = []
508+
unique_patched_packages_with_affected_packages[package.patched_package].append(
509+
package.vulnerable_package
510+
)
511+
512+
for (
513+
fixed_package,
514+
affected_packages,
515+
) in unique_patched_packages_with_affected_packages.items():
516+
yield Inference.from_advisory_data(
517+
advisory_data,
518+
confidence=90,
519+
affected_purls=affected_packages,
520+
fixed_purl=fixed_package,
521+
)
514522

515523

516524
def resolve_version_range(

0 commit comments

Comments
 (0)