Skip to content

Conversation

@ctron
Copy link
Contributor

@ctron ctron commented May 8, 2023

This PR includes #9 to fix the build.


fix: represent the CVSS v2 section as "any JSON"

The current definition of "string" doesn't work out. I understand that there currently is no v2 definition available, however if a v2 section is present, now it will fail to parse the file as a "string" is expected but a "map" is found.

ctron added 3 commits May 8, 2023 11:44
The current definition of "string" doesn't work out. I understand that
there currently is no v2 definition available, however if a v2 section
is present, now it will fail to parse the file as a "string" is expected
but a "map" is found.
@ctron ctron marked this pull request as ready for review May 8, 2023 11:08
@voteblake
Copy link
Owner

Thanks - this makes sense. The upstream CVSS crate only provides a V2 data model, but we should still parse v2. I did not have any documents with V2 values in the test set. I'll merge this and add a case to catch regressions.

Adding an actual data model for V2 is a 'TODO'.

@voteblake voteblake merged commit 606f4e5 into voteblake:main May 8, 2023
@ctron ctron deleted the feature/workaround_missing_cvss_v2_1 branch May 9, 2023 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants