cve-check: fix CVE URL format
Update NVD source to full URL format following CycloneDC 1.6 specification [1]. Before: "url": "https://nvd.nist.gov/" After: "url": "https://nvd.nist.gov/vuln/detail/CVE-XXXX" [1] https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_source_url Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr> Acked-By: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Romain Naour <romain.naour@smile.fr>
This commit is contained in:
committed by
Romain Naour
parent
4cc0e959ff
commit
ac466d4b1a
@@ -131,7 +131,7 @@ def nvd_cve_to_cdx_vulnerability(nvd_cve):
|
||||
"description": cve_api_get_lang_from_list(nvd_cve.get("descriptions", [])) or "",
|
||||
"source": {
|
||||
"name": "NVD",
|
||||
"url": "https://nvd.nist.gov/"
|
||||
"url": f"https://nvd.nist.gov/vuln/detail/{nvd_cve['id']}"
|
||||
},
|
||||
**({
|
||||
"published": nvd_cve["published"],
|
||||
|
||||
Reference in New Issue
Block a user