cve-check: fix CVE URL format

Update NVD source to full URL format following CycloneDC 1.6
specification [1].

Before: "url": "https://nvd.nist.gov/"
After:  "url": "https://nvd.nist.gov/vuln/detail/CVE-XXXX"

[1] https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_source_url

Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>
Acked-By: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
This commit is contained in:
Fabien Lehoussel
2026-02-24 14:33:41 +01:00
committed by Romain Naour
parent 4cc0e959ff
commit ac466d4b1a

View File

@@ -131,7 +131,7 @@ def nvd_cve_to_cdx_vulnerability(nvd_cve):
"description": cve_api_get_lang_from_list(nvd_cve.get("descriptions", [])) or "",
"source": {
"name": "NVD",
"url": "https://nvd.nist.gov/"
"url": f"https://nvd.nist.gov/vuln/detail/{nvd_cve['id']}"
},
**({
"published": nvd_cve["published"],