(vuln: OsvVulnerability)
| 138 | } |
| 139 | |
| 140 | function getVulnerabilityUrl(vuln: OsvVulnerability): string { |
| 141 | if (vuln.id.startsWith('GHSA-')) { |
| 142 | return `https://github.com/advisories/${vuln.id}` |
| 143 | } |
| 144 | const cveAlias = vuln.aliases?.find(a => a.startsWith('CVE-')) |
| 145 | if (cveAlias) { |
| 146 | return `https://nvd.nist.gov/vuln/detail/${cveAlias}` |
| 147 | } |
| 148 | return `https://osv.dev/vulnerability/${vuln.id}` |
| 149 | } |
| 150 | |
| 151 | /** |
| 152 | * Parse OSV range events into introduced/fixed pairs. |