RedHatProductSecurity / cvelib

A Python library and command line interface for CVE Services.
MIT License
52 stars 24 forks source link

Skip adding providerMetadata to CVE records before submission #71

Closed mprpic closed 1 year ago

mprpic commented 1 year ago

This data is stripped by CVE Services anyway in the received request data, so it's useless to add it. In CVE Services, the provider is determined by the credentials a user authenticates with. See e.g.:

https://github.com/CVEProject/cve-services/blob/d3d26d154e53b1862e77949bc8833c688de99fb5/api-docs/openapi.json#L992