Skip to content

generated CVE JSON 5 typescript file is missing elements from schema #5

@hkong-mitre

Description

@hkong-mitre

The src/generated/quicktools/CveRecordV5.ts file is generated by quicktype/quicktools using the official CVE JSON 5 schema. During a PR review, the reviewer noticed that some elements are missing.

Currently (version 0.9 and 1.0), the script does not use most of the generated code. Only CveMetadata is referenced.

The output from the utility reads in the JSON from RSUS, finds the CveMetadata's cveId, and writes the JSON out to the appropriate /cves directory based on that ID. Since the missing elements are not referenced in the utility and is written out verbatim (after prettying), the issue is not affecting the way that the bulk download github action is working.

However, it raises a concern that should be addressed should the utility use more metadata than what is in CveMetadata.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions