go-cve-dictionary builds a local copy of the National Vulnerabilities
Database(NVD) and Japan Vulnerability Notes(JVN). NVD and JVN contain security
vulnerabilities according to their CVE identifiers including exhaustive
information and a risk score. The local copy is generated in a database, using
sqlite3, postgres or mysql. A server is included for easy querying.
This program is tightly related to security/vuls, a client binary that is used
to report about known vulnerabilities in packages. vuls uses the
go-cve-dictionary service when reporting about problems.
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
security/go-cve-dictionary: Upgrade to 0.10.1.
This port is mainly here as a dependency of security/vuls. Update and
take maintainership due to maintainer timeout. [1]
Adding a default config file that should work more or less out the box
for a simple local setup. It has examples for a larger deployment.
PR: 259948 [1] Maintainer timeout
security/go-cve-dictionary: fix build on riscv64
Bump golang.org/x/sys dependency to a version new enough to
support riscv64. While we are at it, chase dependency rename
go-redis/redis -> redis/go-redis.
Sponsored by: Berliner Linux User Group e.V.
Approved by: portmgr (build fix blanket)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Go ports: cleanup, finish transition to USES=go started with r505321 (cat.
misc-shells)
- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them
Reviewed by: tobik
Approved by: araujo (mentor), portmgr (adamw)
Differential Revision: https://reviews.freebsd.org/D21743
security/go-cve-dictionary: USES=go does not take any arguments
- Prepare for D19570
Submitted by: Dmitri Goutnik <dg@syrec.org>
Approved by: portmgr blanket
Differential Revision: https://reviews.freebsd.org/D19802
This is tool to build a local copy of the National Vulnerabilities Database(NVD)
and the Japan Vulnerability Notes (JVN). NVD and JVN contain security
vulnerabilities according to their CVE identifiers, including exhaustive
information and a risk score. The local copy is generated in sqlite format, and
the tool has a server mode for easy querying.
WWW: https://github.com/kotakanbe/go-cve-dictionary/
PR: 220561
Submitted by: Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
Reviewed by: matthew (mentor), koobs, mat
Approved by: matthew (mentor)
Differential Revision: https://reviews.freebsd.org/D11745
