MIRRORS/yocto-autobuilder-helper
1
0
Fork 0
mirror of git://git.yoctoproject.org/yocto-autobuilder-helper.git synced 2025-10-22 23:02:21 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

config.json: metrics: Switch to daily CVE DB full-download

Browse Source 
By using CVE_DB_INCR_UPDATE_AGE_THRES = CVE_DB_INCR_UPDATE_AGE_THRES = 6h,
cve-check will do a NVD database full download if the database is older
than 6h or reuse it un-updated if its younger than 6h. Since the metrics
builder is scheduled every day, that will result in a daily
full-download.

That will workaround NVD API limitations were some updates may be missed
and the incrementaly updated database is not equivalent to a freshly
downloaded database.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Yoann Congal 2024-03-13 20:54:24 +01:00 committed by Richard Purdie
parent 4b9fe2cd8c
commit 7a71f86c51
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config.json
View File

@ -1307,6 +1307,7 @@
"CVE_CHECK_FORMAT_JSON = '1'",
"CVE_CHECK_SHOW_WARNINGS = '0'",
"CVE_DB_UPDATE_INTERVAL = '21600'",
"CVE_DB_INCR_UPDATE_AGE_THRES = '21600'",
"BB_SERVER_TIMEOUT = '0'"
],
"step1" : {