https://github.com/fabric8-analytics/graph-cve-sync
OpenShift cron job which keeps f8a graph database up-to-date
https://github.com/fabric8-analytics/graph-cve-sync
cronjob cve graph gremlin sync
Last synced: 5 months ago
JSON representation
OpenShift cron job which keeps f8a graph database up-to-date
- Host: GitHub
- URL: https://github.com/fabric8-analytics/graph-cve-sync
- Owner: fabric8-analytics
- Created: 2018-09-06T19:26:09.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2023-03-16T12:17:37.000Z (about 3 years ago)
- Last Synced: 2024-04-14T23:54:13.871Z (about 2 years ago)
- Topics: cronjob, cve, graph, gremlin, sync
- Language: Python
- Size: 210 KB
- Stars: 0
- Watchers: 6
- Forks: 18
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# graph-cve-sync
OpenShift cron job which keeps fabric8-analytics graph database up-to-date.
## Configuration
Following environment variables can be used to control behaviour of the cron job:
`SYNC_MODE` - can be "full" or "diff". The former forces full sync while latter
synchronizes only the changes since last successful run. Default is "diff".
`BAYESIAN_DATA_IMPORTER_SERVICE_HOST` - data-importer service hostname
`BAYESIAN_DATA_IMPORTER_SERVICE_PORT` - data-importer service port
`DRY_RUN` - don't write anything to graph
## Snyk Vulnerability Data
The cron job is now extended to populate the Snyk vulnerabilities into our graph.
For determining the affected versions, we use a combination of python's in built libraries
and our own custom "fabric8-analytics-version-comparator". This is needed because unlike
npm (node), which follows the semantic versions, maven and python do not.