search

CVEProject / cvelistV5

CVE cache of the official CVE List in CVE JSON 5 format
735 stars 163 forks source link

Update --minutes-ago does not appear to work correctly if an update has already occurred we issued this update #22

Open athu-tran opened 1 year ago

athu-tran commented 1 year ago

Steps to reproduce:

  1. Manually ran Update action
  2. Manually ran Update action--minutes-ago 2880 (we did not get all of the CVE changes in the last 48-hours)
  3. Manually ran Update action--minutes-ago 4320 (we did not get all of the CVE changes in the last 72-hours)

Verify that the utilities is working correctly and the resulting /cves directory has the correct CVEs by running rebuild command

hkong-mitre commented 1 year ago

This is a concern if there are no updates in github for a long period of time (e.g., 24 hours), as was @athu-tran's case, where she forked the project, but did not enable the actions.

When debugging this, if the /cves directory isn't missing any CVEs, then the update command is working correctly, and the problem lies with the deltas called after update.

hkong-mitre commented 1 year ago

As a temporary work-around, you can use --before <timestamp> instead of --minutes-ago <minutes>. That will provide the same result.