FLOP:CPE tagger

From Funtoo
Revision as of 17:22, April 15, 2020 by Mrl5 (talk | contribs)
Jump to navigation Jump to search
Created on
2020/04/15
Original Author(s)
mrl5
Git sources (for cloning)
Link
Status

Funtoo Linux Optimization Proposal: CPE tagger

lets tag the ebuilds with NIST NVD CPE so that https://www.funtoo.org/FLOP:CVE_Monitoring is more reliable

By introducing Plugin Oriented Programming we can create a plugin which tags funtoo meta-repo ebuilds with CPE tag. By using proper design, this can be integrated with https://code.funtoo.org/bitbucket/users/drobbins/repos/funtoo-metatools/browse

Steps:

1. Create a JSON representation of meta-repo: https://code.funtoo.org/bitbucket/users/mrl5/repos/metarepo-to-json/browse

1.1. Store it in mongodb

1.2 Serve it via REST API

2. Create a CPE tagger

3. Cron job for updating mongodb

Related FLOPs:

- https://www.funtoo.org/FLOP:CVE_Monitoring