Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(osv): Align Reference.Type with spec version 1.6.0 #7535

Merged
merged 1 commit into from
Sep 19, 2023

Conversation

fviernau
Copy link
Member

The Osv backend returns JSON data compliant with spec version 1.6.0, while ORT's handling hasn't been updated to that (latest) version.

For example, the root cause of [2] is that Reference.Type is lacking the value EVIDENCE.

Align only the values of Reference.Type with version 1.6.0 in order to fix [2] quickly. In a future change, remaining alignments, if any, should be made.

[1] https://github.com/ossf/osv-schema/blob/v1.6.0/validation/schema.json
[2] #7531

Fixes #7531.


Follow-up work: #7534.

The `Osv` backend returns JSON data compliant with spec version 1.6.0,
while ORT's handling hasn't been updated to that (latest) version.

For example, the root cause of [2] is that `Reference.Type` is lacking
the value `EVIDENCE`.

Align only the values of `Reference.Type` with version 1.6.0 in order to
fix [2] quickly. In a future change, remaining alignments, if any,
should be made.

[1] https://github.com/ossf/osv-schema/blob/v1.6.0/validation/schema.json
[2] #7531

Signed-off-by: Frank Viernau <[email protected]>
@fviernau fviernau requested a review from a team as a code owner September 19, 2023 10:21
@fviernau fviernau enabled auto-merge (rebase) September 19, 2023 10:22
@codecov
Copy link

codecov bot commented Sep 19, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (5a92da8) 68.02% compared to head (9d08531) 68.02%.

Additional details and impacted files
@@            Coverage Diff            @@
##               main    #7535   +/-   ##
=========================================
  Coverage     68.02%   68.02%           
  Complexity     2023     2023           
=========================================
  Files           343      343           
  Lines         16723    16723           
  Branches       2371     2371           
=========================================
  Hits          11375    11375           
  Misses         4364     4364           
  Partials        984      984           
Flag Coverage Δ
funTest-non-docker 36.46% <ø> (ø)
test 35.51% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@fviernau fviernau merged commit 3092dc2 into main Sep 19, 2023
22 checks passed
@fviernau fviernau deleted the osv-fix-reported-issue branch September 19, 2023 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

ORT fails with SerializationException on PYSEC-2023-163
2 participants