Minor fixes and improvements in Github Importer

* The github importer used to abandon a vulnerability if
  the affected package had invalid name. This commit changes that
  behaviour to instead  skip the package and import the vulnerability

* This commit also enables github api to import vulnerabilities for python
  and rubygems packages.

Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>

Author: sbs2001

vulnerabilities/importers/github.py

@@ -42,6 +42,8 @@
 from vulnerabilities.package_managers import MavenVersionAPI
 from vulnerabilities.package_managers import NugetVersionAPI
 from vulnerabilities.package_managers import ComposerVersionAPI
+from vulnerabilities.package_managers import PypiVersionAPI
+from vulnerabilities.package_managers import RubyVersionAPI
 
 # set of all possible values of first '%s' = {'MAVEN','COMPOSER', 'NUGET'}
 # second '%s' is interesting, it will have the value '' for the first request,
@@ -132,6 +134,8 @@ def set_version_api(self, ecosystem: str) -> None:
             "MAVEN": MavenVersionAPI,
             "NUGET": NugetVersionAPI,
             "COMPOSER": ComposerVersionAPI,
+            "PIP": PypiVersionAPI,
+            "RUBYGEMS": RubyVersionAPI
         }
         versioner = versioners.get(ecosystem)
         if versioner:
@@ -146,14 +150,14 @@ def process_name(ecosystem: str, pkg_name: str) -> Optional[Tuple[Optional[str],
                 return
             ns, name = artifact_comps
             return ns, name
-
-        if ecosystem == "NUGET":
-            return None, pkg_name
-
+        
         if ecosystem == "COMPOSER":
             vendor, name = pkg_name.split("/")
             return vendor, name
 
+        if ecosystem == "NUGET" or ecosystem == "PIP" or ecosystem == "RUBYGEMS":
+            return None, pkg_name
+
     def collect_packages(self, ecosystem):
         packages = set()
         for page in self.advisories[ecosystem]:
@@ -172,23 +176,25 @@ def process_response(self) -> List[Advisory]:
 
                     if self.process_name(ecosystem, name):
                         ns, pkg_name = self.process_name(ecosystem, name)
-                    else:
-                        continue
-                    aff_range = adv["node"]["vulnerableVersionRange"]
-                    aff_vers, unaff_vers = self.categorize_versions(
-                        aff_range, self.version_api.get(name)
-                    )
-                    affected_purls = {
-                        PackageURL(name=pkg_name, namespace=ns,
-                                   version=version, type=pkg_type)
-                        for version in aff_vers
-                    }
-
-                    unaffected_purls = {
-                        PackageURL(name=pkg_name, namespace=ns,
-                                   version=version, type=pkg_type)
-                        for version in unaff_vers
-                    }
+                        aff_range = adv["node"]["vulnerableVersionRange"]
+                        aff_vers, unaff_vers = self.categorize_versions(
+                            aff_range, self.version_api.get(name)
+                        )
+                        affected_purls = {
+                            PackageURL(name=pkg_name, namespace=ns,
+                                    version=version, type=pkg_type)
+                            for version in aff_vers
+                        }
+
+                        unaffected_purls = {
+                            PackageURL(name=pkg_name, namespace=ns,
+                                    version=version, type=pkg_type)
+                            for version in unaff_vers
+                        }
+                    else : 
+                        affected_purls = set()
+                        unaffected_purls = set()
+
 
                     cve_ids = set()
                     vuln_references = []