1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
//! ref: composer/src/Composer/Advisory/SecurityAdvisory.php
use chrono::{DateTime, Utc};
use indexmap::IndexMap;
use shirabe_php_shim::{JsonSerializable, PhpMixed};
use shirabe_semver::constraint::constraint_interface::ConstraintInterface;
use crate::advisory::ignored_security_advisory::IgnoredSecurityAdvisory;
use crate::advisory::partial_security_advisory::PartialSecurityAdvisory;
#[derive(Debug)]
pub struct SecurityAdvisory {
inner: PartialSecurityAdvisory,
pub title: String,
pub cve: Option<String>,
pub link: Option<String>,
pub reported_at: DateTime<Utc>,
pub sources: Vec<IndexMap<String, String>>,
pub severity: Option<String>,
}
impl SecurityAdvisory {
pub fn new(
package_name: String,
advisory_id: String,
affected_versions: Box<dyn ConstraintInterface>,
title: String,
sources: Vec<IndexMap<String, String>>,
reported_at: DateTime<Utc>,
cve: Option<String>,
link: Option<String>,
severity: Option<String>,
) -> Self {
let inner = PartialSecurityAdvisory::new(package_name, advisory_id, affected_versions);
Self {
inner,
title,
sources,
reported_at,
cve,
link,
severity,
}
}
pub fn to_ignored_advisory(&self, ignore_reason: Option<String>) -> IgnoredSecurityAdvisory {
IgnoredSecurityAdvisory::new(
self.inner.package_name.clone(),
self.inner.advisory_id.clone(),
// TODO: Phase B - handle shared ownership of affected_versions
self.inner.affected_versions.clone(),
self.title.clone(),
self.sources.clone(),
self.reported_at,
self.cve.clone(),
self.link.clone(),
ignore_reason,
self.severity.clone(),
)
}
}
impl JsonSerializable for SecurityAdvisory {
fn json_serialize(&self) -> PhpMixed {
let mut data = match self.inner.json_serialize() {
PhpMixed::Array(m) => m,
_ => IndexMap::new(),
};
data.insert("title".to_string(), Box::new(PhpMixed::String(self.title.clone())));
data.insert("cve".to_string(), Box::new(match &self.cve {
Some(s) => PhpMixed::String(s.clone()),
None => PhpMixed::Null,
}));
data.insert("link".to_string(), Box::new(match &self.link {
Some(s) => PhpMixed::String(s.clone()),
None => PhpMixed::Null,
}));
data.insert("reportedAt".to_string(), Box::new(PhpMixed::String(self.reported_at.to_rfc3339())));
data.insert("sources".to_string(), Box::new(PhpMixed::List(
self.sources.iter().map(|source| {
Box::new(PhpMixed::Array(
source.iter().map(|(k, v)| (k.clone(), Box::new(PhpMixed::String(v.clone())))).collect()
))
}).collect()
)));
data.insert("severity".to_string(), Box::new(match &self.severity {
Some(s) => PhpMixed::String(s.clone()),
None => PhpMixed::Null,
}));
PhpMixed::Array(data)
}
}
|
