Rename AVID to advisory_uid in API

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>

Author: TG1999

CHANGELOG.rst

@@ -4,7 +4,8 @@ Release notes
 next release
 ---------------------
 
-- WARNING: Vulnerablecode V1 API and UI has stopped supporting Ubuntu OVAL advisories, please shift to V3 API for new Ubuntu advisories. 
+- WARNING: Vulnerablecode V1 API and UI has stopped supporting Ubuntu OVAL advisories, please shift to V3 API for new Ubuntu advisories.
+- Add attribute ``pipeline_id`` to AdvisoryV2 to track the pipeline that created the advisory, also rename existing ``datasource_id`` and AVIDs. 
 
 Version v38.6.0
 ---------------------

vulnerabilities/api_v3.py

@@ -113,7 +113,7 @@ class AdvisoryV3Serializer(serializers.ModelSerializer):
     weaknesses = AdvisoryWeaknessSerializer(many=True)
     references = AdvisoryReferenceSerializer(many=True)
     severities = AdvisorySeveritySerializer(many=True)
-    advisory_id = serializers.CharField(source="avid", read_only=True)
+    advisory_uid = serializers.CharField(source="avid", read_only=True)
     related_ssvc_trees = serializers.SerializerMethodField()
 
     def get_related_ssvc_trees(self, obj):
@@ -143,6 +143,7 @@ class Meta:
         model = AdvisoryV2
         fields = [
             "advisory_id",
+            "advisory_uid",
             "url",
             "aliases",
             "summary",
@@ -270,6 +271,7 @@ def get_affected_by_vulnerabilities(self, package):
                 result.append(
                     {
                         "advisory_id": advisory.advisory_id.split("/")[-1],
+                        "advisory_uid": advisory.avid,
                         "aliases": [alias.alias for alias in advisory.aliases.all()],
                         "summary": advisory.summary,
                         "severity": advisory.weighted_severity,
@@ -313,6 +315,7 @@ def get_fixing_vulnerabilities(self, package):
                 results.append(
                     {
                         "advisory_id": advisory.advisory_id.split("/")[-1],
+                        "advisory_uid": advisory.avid,
                     }
                 )
             return results
@@ -337,6 +340,7 @@ def return_fixing_advisories_data(self, advisories):
             result.append(
                 {
                     "advisory_id": advisory.identifier,
+                    "advisory_uid": advisory.advisory.avid,
                 }
             )
 
@@ -364,6 +368,7 @@ def return_advisories_data(self, package, advisories_qs, advisories):
             result.append(
                 {
                     "advisory_id": advisory.identifier,
+                    "advisory_uid": advisory.advisory.avid,
                     "aliases": [alias.alias for alias in advisory.aliases],
                     "weighted_severity": advisory.weighted_severity,
                     "exploitability": advisory.exploitability,
@@ -471,6 +476,7 @@ def create(self, request, *args, **kwargs):
 
 class AffectedByAdvisoryV3Serializer(AdvisoryV3Serializer):
     fixed_by_packages = serializers.SerializerMethodField()
+    advisory_uid = serializers.CharField(source="avid", read_only=True)
 
     def get_fixed_by_packages(self, obj):
         return list(
@@ -483,6 +489,7 @@ class Meta:
         model = AdvisoryV2
         fields = [
             "advisory_id",
+            "advisory_uid",
             "url",
             "aliases",
             "summary",
@@ -623,8 +630,8 @@ def get_affected_advisories_bulk(packages):
 
             grouped.append(
                 {
-                    "avid": primary.avid,
                     "advisory_id": identifier,
+                    "advisory_uid": primary.avid,
                     "aliases": aliases,
                     "weighted_severity": weighted_severity,
                     "exploitability": exploitability,
@@ -699,7 +706,9 @@ def get_fixing_advisories_bulk(packages):
         grouped = []
 
         for adv_id in groups:
-            grouped.append({"advisory_id": adv_id.split("/")[-1]})
+            grouped.append(
+                {"advisory_id": adv_id.split("/")[-1], "advisory_uid": adv_id.split("/")[-1]}
+            )
 
         result[package.id] = grouped
 

vulnerabilities/pipelines/exporters/federate_vulnerabilities.py

@@ -14,11 +14,11 @@
 from operator import attrgetter
 from pathlib import Path
 
-from aboutcode.federated import DataFederation
 from aboutcode.pipeline import LoopProgress
 from django.conf import settings
 from django.utils import timezone
 
+from aboutcode.federated import DataFederation
 from vulnerabilities.pipelines import VulnerableCodePipeline
 from vulnerabilities.pipes import export
 from vulnerabilities.pipes import federatedcode

vulnerabilities/pipelines/v2_improvers/reference_collect_commits.py

@@ -8,12 +8,12 @@
 #
 from collections import defaultdict
 
-from aboutcode.federated import get_core_purl
 from aboutcode.pipeline import LoopProgress
 from django.db.models import Prefetch
 from packageurl.contrib.purl2url import purl2url
 from packageurl.contrib.url2purl import url2purl
 
+from aboutcode.federated import get_core_purl
 from vulnerabilities.models import AdvisoryReference
 from vulnerabilities.models import AdvisoryV2
 from vulnerabilities.models import ImpactedPackage