RedHatProductSecurity / cvelib

A Python library and command line interface for CVE Services.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add ADP functionality

mprpic opened this issue · comments

The Authorized Data Publisher (ADP) functionality in CVE Service is being implemented (tracked here). Add support for manipulating ADP containers on a CVE record to cvelib.

Some high-level requirements:

  • Support addition, deletion, and updates of an ADP container in a given CVE record
  • Support viewing ADP containers for a given CVE record (allow enumerating ADP records if there are multiple and only displaying one or a subset of them)
  • Support validating ADP containers using the ADP container sub-schema
  • Support listing CVE records where my organization added an ADP container (TODO: check to see how this is supported in CVE Services)
  • Support listing CVE records where my organization added an ADP container (TODO: check to see how this is supported in CVE Services)

This is currently not possible since no such endpoint exists in CVE Services. One was proposed to be added (similar to the existing /cve-id endpoint) at the AWG meeting on Jul 11.