Skip to content

Commit a7df25f

Browse files
committed
minor cleanup
Signed-off-by: karthiknew07 <[email protected]>
1 parent ec0ba42 commit a7df25f

File tree

1 file changed

+0
-7
lines changed

1 file changed

+0
-7
lines changed

vulnerabilities/pipelines/v2_importers/alpine_linux_importer.py

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -94,11 +94,8 @@ def steps(cls):
9494
def fetch(self) -> Iterable[Mapping]:
9595
self.log("Fetching Alpine Linux APKBUILD files")
9696

97-
# For now, process known packages
98-
# In production, this would discover all packages
9997
self.packages_data = []
10098

101-
# Example package - can be expanded to fetch multiple packages
10299
packages_to_process = [
103100
('main', 'asterisk'),
104101
]
@@ -139,26 +136,22 @@ def parse_package_advisories(self, package_data: Mapping) -> Iterable[AdvisoryDa
139136
secfixes = package_data['secfixes']
140137
url = package_data['url']
141138

142-
# Group by CVE
143139
cve_to_versions = {}
144140
for version, cve_list in secfixes.items():
145141
for cve_id in cve_list:
146142
if cve_id not in cve_to_versions:
147143
cve_to_versions[cve_id] = []
148144
cve_to_versions[cve_id].append(version)
149145

150-
# Create advisories
151146
for cve_id, versions in cve_to_versions.items():
152147
affected_packages = []
153148

154-
# PackageURL should NOT have version
155149
purl = PackageURL(
156150
type="apk",
157151
namespace=branch,
158152
name=package_name,
159153
)
160154

161-
# Create affected package with version range
162155
affected_package = AffectedPackageV2(
163156
package=purl,
164157
fixed_version_range=GenericVersionRange.from_versions(versions),

0 commit comments

Comments
 (0)