Method testAddVulnerability

tests/RepositoryAdvisory.py:337–374

(self)

        )

    def testAddVulnerability(self):
        repo = self.g.get_repo("JLLeitschuh/code-sandbox")
        advisory = repo.create_repository_advisory(
            summary="A test creating a GHSA via the API adding and removing vulnerabilities",
            description="Simple description",
            severity_or_cvss_vector_string="low",
        )
        advisory.add_vulnerability(ecosystem="maven")
        self.assertListKeyEqual(
            advisory.vulnerabilities,
            lambda e: (
                (e.package.ecosystem, e.package.name),
                e.patched_versions,
                e.vulnerable_functions,
                e.vulnerable_version_range,
            ),
            [(("maven", None), None, [], None)],
        )
        advisory.add_vulnerability(
            ecosystem="npm",
            package_name="b-package",
            vulnerable_version_range="<=4.0.9",
            patched_versions="4.0.10",
            vulnerable_functions=["function-name-c"],
        )
        self.assertListKeyEqual(
            advisory.vulnerabilities,
            lambda e: (
                (e.package.ecosystem, e.package.name),
                e.patched_versions,
                e.vulnerable_functions,
                e.vulnerable_version_range,
            ),
            [
                (("maven", None), None, [], None),
                (("npm", "b-package"), "4.0.10", ["function-name-c"], "<=4.0.9"),
            ],
        )