Skip to content

Conversation

@KArashid
Copy link

Get packages CVEs files and convert them to Sarif format.

  1. Used results and misused rules tags of Sarif format
  2. output is compatible with Trivy Sarif format
  3. Output is validated with online validator: https://sarifweb.azurewebsites.net/Validation
  4. Output is in a format accepted by Github Advance Security

@kraj
Copy link
Contributor

kraj commented Jul 13, 2022

you might post it to [email protected] mailing list as well for review.

@KArashid KArashid force-pushed the extend-cveOutput-to-sarif-format branch from 510b3bf to 5110504 Compare July 13, 2022 19:19
halstead pushed a commit that referenced this pull request Apr 13, 2023
Changelog:
==========
Bug fixes:
----------
    Issue #74: Include directory should override exclude file.

Improvements:
-------------
    Pull #75: Fix partially unknown PathLike type.
    Convert os.PathLike to a string properly using os.fspath.

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Alexandre Belloni <[email protected]>
halstead pushed a commit that referenced this pull request Aug 13, 2024
crate-py/rpds@v0.20.0...v0.18.1

v0.20.0
  * Implements __hash__ for collections by @FlickerSoul in #81

v0.19.1
  * Make Python versions in GitHub Actions consistent by @rominf in #80

v0.19.0
  * deps: bump libc from 0.2.147 to 0.2.155 by @wxpppp in #74
  * Make Python 3.13 Compatible by @FlickerSoul in #79

Signed-off-by: Tim Orling <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
halstead pushed a commit that referenced this pull request Aug 14, 2024
crate-py/rpds@v0.20.0...v0.18.1

v0.20.0
  * Implements __hash__ for collections by @FlickerSoul in #81

v0.19.1
  * Make Python versions in GitHub Actions consistent by @rominf in #80

v0.19.0
  * deps: bump libc from 0.2.147 to 0.2.155 by @wxpppp in #74
  * Make Python 3.13 Compatible by @FlickerSoul in #79

Signed-off-by: Tim Orling <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
halstead pushed a commit that referenced this pull request Aug 15, 2024
crate-py/rpds@v0.20.0...v0.18.1

v0.20.0
  * Implements __hash__ for collections by @FlickerSoul in #81

v0.19.1
  * Make Python versions in GitHub Actions consistent by @rominf in #80

v0.19.0
  * deps: bump libc from 0.2.147 to 0.2.155 by @wxpppp in #74
  * Make Python 3.13 Compatible by @FlickerSoul in #79

Signed-off-by: Tim Orling <[email protected]>
Signed-off-by: Alexandre Belloni <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
halstead pushed a commit that referenced this pull request Oct 17, 2025
To facilitate a clean backport of the full 10-commit series
addressing the pthread condition variable lost wakeup issue
(BZ#25847) in glibc 2.35, remove the existing 8 patches that
were applied as a partial backport.

The previous partial backport excluded commit:
c36fc50781995e6758cae2b6927839d0157f213c ("nptl: Remove
g_refs from condition variables") based on guidance from
glibc maintainer Florian Weimer(#comment #74)

This exclusion was recommended for stable branches to
avoid altering the layout of pthread_cond_t, which could
introduce ABI incompatibilities. Additionally, the dependent
commit dbc5a50d12eff4cb3f782129029d04b8a76f58e7 was not needed
in the partial backport.

To align with upstream mainline, per maintainer Carlos O'Donell
(comment #75), apply the complete 10-commit series for consistency.

By removing these patches first, we ensure the subsequent
application of the full 10 commits results in cleaner, more
reviewable changes without intermixed conflicts or overlaps.

Removed patches and corresponding upstream commits:
- 0026-PR25847-1.patch: 1db84775f831a1494993ce9c118deaf9537cc50a
- 0026-PR25847-2.patch: 0cc973160c23bb67f895bc887dd6942d29f8fee3
- 0026-PR25847-3.patch: b42cc6af11062c260c7dfa91f1c89891366fed3e
- 0026-PR25847-4.patch: 4f7b051f8ee3feff1b53b27a906f245afaa9cee1
- 0026-PR25847-5.patch: 929a4764ac90382616b6a21f099192b2475da674
- 0026-PR25847-6.patch: ee6c14ed59d480720721aaacc5fb03213dc153da
- 0026-PR25847-7.patch: 4b79e27a5073c02f6bff9aa8f4791230a0ab1867
- 0026-PR25847-8.patch: 91bb902f58264a2fd50fbce8f39a9a290dd23706

Bug reference: https://sourceware.org/bugzilla/show_bug.cgi?id=25847
This change prepares the branch for the full backport in follow-up commits.

Signed-off-by: Sunil Dora <[email protected]>
Signed-off-by: Steve Sakoman <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants