search

CVEProject / cve-services

This repo contains the source for the CVE Services API.
Creative Commons Zero v1.0 Universal
151 stars 70 forks source link

Standardize all timestamp values to UTC #1274

Open jdaigneau5 opened 1 month ago

jdaigneau5 commented 1 month ago

Summary

Confirm that all CVE-Services generated timestamp values are in UTC time. Also, ensure that all incoming timestamp value are in UTC time (Might be a schema issue, depends on more discussion).

Definition of Done

Note CVE-Services uses ISO timestamps already. Need to confirm this is universally the case.

jayjacobs commented 1 week ago

It was requested that I open an issue in CVE Services for this exact topic, we talked about it in the Automation Working Group and issue 135 in that repo.

My recommendation/ask is to:

  1. convert all existing date/time fields to be explicitly in the YYYY-MM-DDThh:mm:ssZ format (convert everything to UTC time even if a different time zone was supplied)
  2. Convert any new/incoming date/time fields to be stored as YYYY-MM-DDThh:mm:ssZ regardless of timezone submitted (or omiteed).
  3. Drop the unnecessary precision of milliseconds, just show whole seconds.