search

fkie-cad / nvd-json-data-feeds

Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endorsed nor certified by the NVD.
109 stars 15 forks source link

No release of the cve-1.1-%d.meta file #8

Closed Silicoman closed 9 months ago

Silicoman commented 9 months ago

Hi!

Thanks to you for your implementation! Shame on me.. I havent find a proper solution to expose the new NVD API on my private network since monday... the deadline of feeds nvd... I was looking to do a same work.. or publish a cve database.. well something which not ready for now!

I have tested switch my tools with your releases github endpoint but finally i have find a lack of the nvdcve-1.1-%d.meta file in your release management. I'm a fan of dependency-track and dependency-check but they are using meta files... annoying. :(

Is it possible to publish meta file for each json also on your release repo? It 's may the last brick to restore my feed nvd to my tools.

It looks like https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta (or https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2023.meta)

lastModifiedDate:2023-12-20T12:00:01-05:00 size:7362968 zipSize:404598 gzSize:404454 sha256:D8E5C23AA8600D83D068E812D08EF1CF2F346A6E6DBAD4BFAD99B8601DB93472

See ya

rhelmke commented 9 months ago

Hey Louis,

we considered your feature request and decided that it is a useful addition to our release packages. Shouldn't be that hard to emit this information in a separate file.

If I'll find time, I will work on it this afternoon.

rhelmke commented 9 months ago

Hello again,

we now emit meta files. I manually triggered a release and updated the readme.

Cheers and happy holidays