Personal branch of https://git.savannah.gnu.org/cgit/guix.git/ for implementing 'guix deploy'. https://git.jakob.space/guix.git/atom?h=master 2018-08-25T23:47:40Z 2018-08-25T23:47:40Z Ludovic Courtès ludo@gnu.org 2018-08-25T22:10:51Z urn:sha1:8a928aa729f31d3409cee8371894fd9a50e9fe8f * guix/cve.scm (yearly-feed-uri): Remove "static." from the URL since the web site now redirects to the URL without "static.". 2017-11-16T07:45:15Z Ludovic Courtès ludo@gnu.org 2017-11-15T09:23:38Z urn:sha1:7482b98120b5e3380129719f13254b90b18553b9 That way CVE fetching benefits from 'If-Modified-Since' handling. * guix/http-client.scm (http-fetch/cached): Add #:write-cache and #:cache-miss parameters and honor them. * guix/cve.scm (%current-year-ttl, %past-year-ttl): Reduce. (call-with-cve-port): Remove. (write-cache): New procedure. (fetch-vulnerabilities): Rewrite in terms of 'http-fetch/cached'. 2017-09-19T21:58:25Z Ludovic Courtès ludo@gnu.org 2017-09-19T19:24:31Z urn:sha1:f1b65d0dd964e4c457e660b9289a357447939d93 * guix/cve.scm (fetch-vulnerabilities)[read*]: New procedure. Use it in lieu of 'read'. 2016-05-27T23:07:12Z Ludovic Courtès ludo@gnu.org 2016-05-27T22:44:36Z urn:sha1:870bf71eb0983f0f7f7221434db3ff5f785b3b2c On a warm cache, "guix lint -c cve vorbis-tools" goes down from 6.5s to 2.4s. * guix/cve.scm (cpe->package-name): Change to return two values instead of a pair. (cpe->product-alist): New procedure. (%parse-vulnerability-feed): Use it instead of 'filter-map'. (fetch-vulnerabilities): Bump sexp format version to 1. (vulnerabilities->lookup-proc): Adjust accordingly. When #:version is omitted, return a list of vulnerabilities instead of a list of version/vulnerability pairs. * tests/cve.scm (%expected-vulnerabilities) ("vulnerabilities->lookup-proc): Adjust accordingly. 2016-05-26T21:00:08Z Ludovic Courtès ludo@gnu.org 2016-05-26T21:00:08Z urn:sha1:3af7a7a879b91c59fcd5a025ac55db2c69da4fb7 * guix/cve.scm (fetch-vulnerabilities): Add 'format' call. (current-vulnerabilities): Include the 3 previous years. 2016-05-23T16:05:46Z Ludovic Courtès ludo@gnu.org 2016-05-23T15:46:59Z urn:sha1:86cf13033ec23f24665e6dcfafea2e43080f01b0 * guix/cve.scm (call-with-cve-port): Use 'http-fetch' instead of 'http-fetch/cached'. 2016-05-23T16:05:46Z Ludovic Courtès ludo@gnu.org 2016-05-23T15:42:32Z urn:sha1:5cdd21c7fec49e99f20f9ec0444ca1b25ae0bac4 This avoids ~20s of XML parsing when running 'guix lint -c cve'. * guix/cve.scm (vulnerability->sexp, sexp->vulnerability) (fetch-vulnerabilities): New procedures. (current-vulnerabilities): Use 'fetch-vulnerabilities'. 2016-03-11T15:33:50Z Ludovic Courtès ludo@gnu.org 2016-03-11T14:55:57Z urn:sha1:6a25e59514f590aa541ec35ba36fd36b2a1dcbc3 The "Modified" database that we were reading is much smaller, but it only shows CVEs modified over the past week. * guix/cve.scm (%now, %current-year, %past-year): New variables. (yearly-feed-uri): New procedure. (%cve-feed-uri, %ttl): Remove. (%current-year-ttl, %past-year-ttl): New variables. (call-with-cve-port): Add 'uri' and 'ttl' parameters and honor them. Add 'setvbuf' call. (current-vulnerabilities)[read-vulnerabilities]: New procedure. Read from both %LAST-YEAR and %CURRENT-YEAR. 2016-03-11T15:33:50Z Ludovic Courtès ludo@gnu.org 2016-03-11T09:21:58Z urn:sha1:cf557afa2e679f73b93796460dee23d5c5c314c5 * guix/cve.scm (%cpe-package-rx): Adjust to account for :PATCH-LEVEL. (cpe->package-name): Likewise. 2015-11-26T21:35:01Z Ludovic Courtès ludo@gnu.org 2015-11-26T20:52:25Z urn:sha1:0eef7551303e3fc855809d84eed8421d2a075cfa * guix/cve.scm, tests/cve-sample.xml, tests/cve.scm: New files. * Makefile.am (MODULES): Add guix/cve.scm. (SCM_TESTS): Add tests/cve.scm. (EXTRA_DIST): Add tests/cve-sample.scm.