-
Notifications
You must be signed in to change notification settings - Fork 15
Description
The src/generated/quicktools/CveRecordV5.ts file is generated by quicktype/quicktools using the official CVE JSON 5 schema. During a PR review, the reviewer noticed that some elements are missing.
Currently (version 0.9 and 1.0), the script does not use most of the generated code. Only CveMetadata is referenced.
The output from the utility reads in the JSON from RSUS, finds the CveMetadata's cveId, and writes the JSON out to the appropriate /cves directory based on that ID. Since the missing elements are not referenced in the utility and is written out verbatim (after prettying), the issue is not affecting the way that the bulk download github action is working.
However, it raises a concern that should be addressed should the utility use more metadata than what is in CveMetadata.