Safe Haskell	None
Language	GHC2021

Ecluse.Core.Osv.Compile

Description

Compile OSV advisories and EPSS scores into the artifact consumed by CVE sync. Every pass attempts the EPSS feed, and the ecosystem's EpssRequirement decides whether a failed feed stops publication or leaves the artifact recording unavailable enrichment.

Synopsis

data CompileSources = CompileSources {
- csOsvExportUrl :: String
- csEpssFeedUrl :: String
}
compileOsvToSqlite :: (MonadResource m, MonadMask m, MonadUnliftIO m, KatipContext m) => AdvisoryCompileMetricsPort -> Maybe TracerProvider -> FilePath -> OsvEcosystem -> EpssRequirement -> CompileSources -> QuietTime -> m FilePath
data PilotEpssRequired = PilotEpssRequired {
- perEcosystem :: Text
- perFeed :: Text
- perFailure :: EpssFeedFailure
}
osvToRow :: ExtractedOsv -> (Text, Text, Maybe Text, Maybe Text, Maybe Text, Maybe Double, Maybe Double)

Documentation

data CompileSources Source #

The two upstreams one compile pass reads: the ecosystem's advisories, and the exploitability scores it joins onto them.

Constructors

CompileSources
Fields csOsvExportUrl :: String The ecosystem's OSV export archive (`osvExportUrl`). csEpssFeedUrl :: String The EPSS daily feed, from the configured `advisories.epssFeedUrl`.

Instances

Instances details

Show CompileSources Source #
Instance details Defined in Ecluse.Core.Osv.Compile Methods showsPrec :: Int -> CompileSources -> ShowS # show :: CompileSources -> String # showList :: [CompileSources] -> ShowS #
Eq CompileSources Source #
Instance details Defined in Ecluse.Core.Osv.Compile Methods (==) :: CompileSources -> CompileSources -> Bool # (/=) :: CompileSources -> CompileSources -> Bool #

compileOsvToSqlite :: (MonadResource m, MonadMask m, MonadUnliftIO m, KatipContext m) => AdvisoryCompileMetricsPort -> Maybe TracerProvider -> FilePath -> OsvEcosystem -> EpssRequirement -> CompileSources -> QuietTime -> m FilePath Source #

Compile one ecosystem into outDir, refusing systemic drops, zero relevant rows, or a failed EPSS feed the requirement makes fatal. A refusal leaves any previous artifact unchanged.

data PilotEpssRequired Source #

A compile whose ecosystem requires EPSS enrichment met a failed feed, so it published nothing. It names the feed by host and port alone, because the configured URL can carry a credential.

Constructors

PilotEpssRequired
Fields perEcosystem :: Text perFeed :: Text The feed's `host:port`. perFailure :: EpssFeedFailure

Instances

Instances details

Exception PilotEpssRequired Source #
Instance details Defined in Ecluse.Core.Osv.Compile Methods toException :: PilotEpssRequired -> SomeException # fromException :: SomeException -> Maybe PilotEpssRequired # displayException :: PilotEpssRequired -> String # backtraceDesired :: PilotEpssRequired -> Bool #
Show PilotEpssRequired Source #
Instance details Defined in Ecluse.Core.Osv.Compile Methods showsPrec :: Int -> PilotEpssRequired -> ShowS # show :: PilotEpssRequired -> String # showList :: [PilotEpssRequired] -> ShowS #
Eq PilotEpssRequired Source #
Instance details Defined in Ecluse.Core.Osv.Compile Methods (==) :: PilotEpssRequired -> PilotEpssRequired -> Bool # (/=) :: PilotEpssRequired -> PilotEpssRequired -> Bool #

osvToRow :: ExtractedOsv -> (Text, Text, Maybe Text, Maybe Text, Maybe Text, Maybe Double, Maybe Double) Source #

One extracted segment as its artifact row. The upper bound spreads over the fixed_version and last_affected_version columns, and fills at most one of them.