Function get_merged_identifier_groups

vulnerabilities/utils.py:905–962

Merge advisories based on their identifiers (advisory_id and aliases). Example: If two advisories share ``advisory_id`` or share an alias, they will be merged together.

(advisories)

def get_merged_identifier_groups(advisories):
    """
    Merge advisories based on their identifiers (advisory_id and aliases).
    Example: If two advisories share ``advisory_id`` or share an alias, they will be merged together.
    """
    from vulnerabilities.models import Group

    identifier_groups = defaultdict(set)

    advisories = list(advisories)

    for adv in advisories:

        identifier_groups[adv.advisory_id].add(adv)

        for alias in adv.aliases.values_list("alias", flat=True):
            identifier_groups[alias].add(adv)

    groups = [set(advs) for advs in identifier_groups.values() if len(advs) > 1]

    merged = []

    for group in groups:
        group = set(group)

        i = 0
        while i < len(merged):
            if group & merged[i]:
                group |= merged[i]
                merged.pop(i)
            else:
                i += 1

        merged.append(group)

    all_grouped = set()
    for g in merged:
        all_grouped |= g

    for adv in advisories:
        if adv not in all_grouped:
            merged.append({adv})

    final_groups: List[Group] = []

    for group in merged:
        identifiers = set()
        for adv in group:
            for alias in adv.aliases.all().order_by("alias"):
                identifiers.add(alias)

        primary = max(group, key=lambda a: a.precedence if a.precedence is not None else -1)

        secondary = [a for a in group if a != primary]

        final_groups.append(Group(aliases=identifiers, primary=primary, secondaries=secondary))

    return final_groups