Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VCIO-next: Create improver to find fix commits #1696

Closed
Tracked by #1695 ...
pombredanne opened this issue Dec 13, 2024 · 1 comment
Closed
Tracked by #1695 ...

VCIO-next: Create improver to find fix commits #1696

pombredanne opened this issue Dec 13, 2024 · 1 comment

Comments

@pombredanne
Copy link
Member

pombredanne commented Dec 13, 2024

We should collect fix commits from existing references using a new improver.

This improver pipeline that will scout the References to create CodeFix entries.

This will be using the CodeFix models designed in:

And is in support of the larger fix commit collection issue at:

See also these related issues:

@TG1999
Copy link
Contributor

TG1999 commented Jan 10, 2025

This is done now.

We have completed this issue in #1704. To test this setup Vulnerablecode locally with the help of Readme. After setting up VCIO. Run any importer for example ./manage.py import npm_importer. Then run ./manage.py improve collect_fix_commits. Then run the server using make run and go to /api/v2/packages. You can find list of "code_fixes" for for a package in "affected_by_vulnerabilities" like the screenshots below.

Screenshot from 2025-01-08 20-21-06

Screenshot from 2025-01-08 20-21-28

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

2 participants