Skip to content

Modify Rust importer to support package-first mode #1913

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

michaelehab
Copy link
Collaborator

Solves #1911

  • Update Rust importer to only load and process advisories relevant to the purl passed in the constructor
  • Update Rust importer tests to include testing the package-first mode

* Update Rust importer to only load and process advisories relevant to the purl passed in the constructor

* Update Rust importer tests to include testing the package-first mode

Signed-off-by: Michael Ehab Mikhail <[email protected]>
def __init__(self, purl=None, *args, **kwargs):
super().__init__(*args, **kwargs)
self.purl = purl
if self.purl:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
if self.purl:
if self.purl and self.purl.type!="cargo"

@TG1999
Copy link
Contributor

TG1999 commented Jul 15, 2025

We are not running Rust importers either in V1 nor in V2 as of now, I think we need to first make importer functional before doing this.

@pombredanne
Copy link
Member

@michaelehab can you join the community calls and chat rooms so we can discuss this?

@TG1999
Copy link
Contributor

TG1999 commented Jul 16, 2025

@michaelehab it will be helpful for us mentors and community members to design and help you if you can regularly join us in VCIO community calls that happens on Tuesday 8:00 AM PST https://meet.jit.si/VulnerableCode

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Modify the Rust importer to support package-first mode
3 participants