From f3b07e2dedef5f02936f66c9d2d69f09bd2dd0ee Mon Sep 17 00:00:00 2001 From: Matt Weber Date: Thu, 22 Apr 2021 14:45:57 -0500 Subject: [PATCH] support/scripts/pkg-stats: add column reporting ignored CVEs When doing analysis it is helpful to be able to view what CVE have been patched / diagnosed to not apply to Buildroot. This exposes that list to the reporting and prevents a step where you have to dig into the .mk's of a pkg to check for sure what has been ignored. Signed-off-by: Matthew Weber [yann.morin.1998@free.fr: only set background if there are ignored CVEs] Signed-off-by: Yann E. MORIN --- support/scripts/pkg-stats | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/support/scripts/pkg-stats b/support/scripts/pkg-stats index 76bc88b0ba..c7e30dfd2b 100755 --- a/support/scripts/pkg-stats +++ b/support/scripts/pkg-stats @@ -735,6 +735,10 @@ td.cve-unknown { background: #ffd870; } +td.cve_ignored { + background: #ccc; +} + Statistics of Buildroot packages @@ -909,6 +913,15 @@ def dump_html_pkg(f, pkg): f.write(" N/A\n") f.write(" \n") + # CVEs Ignored + td_class = ["centered"] + if pkg.ignored_cves: + td_class.append("cve_ignored") + f.write(" \n" % " ".join(td_class)) + for ignored_cve in pkg.ignored_cves: + f.write(" %s
\n" % (ignored_cve, ignored_cve)) + f.write(" \n") + # CPE ID td_class = ["left"] if pkg.is_status_ok("cpe"): @@ -948,6 +961,7 @@ def dump_html_all_pkgs(f, packages): Warnings Upstream URL CVEs +CVEs Ignored CPE ID """) -- 2.30.2