fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Extracting repository url from links is buggy #88

Closed elanzini closed 2 years ago

elanzini commented 3 years ago

The getBaseRepo defined in the PatchFinder just crops links without any filtering. This leads to erroneous mappings for the repo2purl strategy, where we are creating mappings from references that are not concerned with repository information.

The proposed solution is to restrict the links that are handed to the repoCutter to the following: