feat: add CSAF VEX document generation by IlonaShishov · Pull Request #170 · RHEcosystemAppEng/vulnerability-analysis

feat: add initial implementation for VEX generation using ABC, with CSAF format support

Ilona Shishov

committed

chore: enrich CSAF with analysis data and set to generate for vulnerable CVEs only

Ilona Shishov

committed

chore: add validation to generated CSAF document

Ilona Shishov

committed

chore: add error handling to vex generation

Ilona Shishov

committed

test: add unit tests and error handling

Ilona Shishov

committed

test: add integration tests to csaf vex generation

Ilona Shishov

committed

chore: Add module scoped fixtures and exract data to module level constants for reusability and readability

Ilona Shishov

committed

log: replaced logging import with LoggingFactory

Ilona Shishov

committed

refactor: rename vex modules for clarity

Ilona Shishov

committed

chore: update openapi spec with vex generation, cvss generation and cve intel score

Ilona Shishov

committed

chore: iterate over justifications in vex generation for efficiency

Ilona Shishov

committed

fix: return empty json if vex document fails validation

Ilona Shishov

committed

fix: provide all relevant patch recommendations

Ilona Shishov

committed

chore: update imports to exploit-iq-commons for transfered components

Ilona Shishov

committed

fix: update csaf vex document catagories and add full schema validation

Ilona Shishov

committed

chore: extract vex utils to dedicated file

Ilona Shishov

committed

test: update vex generation unit and IT tests

Ilona Shishov

committed

fix: vendor selection

Ilona Shishov

committed

test: update and add additional integration tests for VEX doc validation

Ilona Shishov

committed

chore: remove redundant return statement

Ilona Shishov

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add CSAF VEX document generation#170

feat: add CSAF VEX document generation#170
IlonaShishov merged 20 commits intomainfrom
vex

Commits on Jan 18, 2026

feat: add initial implementation for VEX generation using ABC, with CSAF format support

chore: enrich CSAF with analysis data and set to generate for vulnerable CVEs only

chore: add validation to generated CSAF document

chore: add error handling to vex generation

test: add unit tests and error handling

test: add integration tests to csaf vex generation

chore: Add module scoped fixtures and exract data to module level constants for reusability and readability

log: replaced logging import with LoggingFactory

refactor: rename vex modules for clarity

chore: update openapi spec with vex generation, cvss generation and cve intel score

chore: iterate over justifications in vex generation for efficiency

fix: return empty json if vex document fails validation

fix: provide all relevant patch recommendations

chore: update imports to exploit-iq-commons for transfered components

fix: update csaf vex document catagories and add full schema validation

chore: extract vex utils to dedicated file

test: update vex generation unit and IT tests

fix: vendor selection

test: update and add additional integration tests for VEX doc validation

chore: remove redundant return statement