Skip to content

deduplicate csaf entries and fix dependency search#1663

Open
Hubtrick-Git wants to merge 3 commits intomainfrom
fix-csaf-for-v1
Open

deduplicate csaf entries and fix dependency search#1663
Hubtrick-Git wants to merge 3 commits intomainfrom
fix-csaf-for-v1

Conversation

@Hubtrick-Git
Copy link
Collaborator

@Hubtrick-Git Hubtrick-Git commented Feb 6, 2026

No description provided.

@Hubtrick-Git Hubtrick-Git self-assigned this Feb 6, 2026
Copilot AI review requested due to automatic review settings February 6, 2026 19:11
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR aims to (1) avoid duplicated CSAF report entries (same CVE listed multiple times) and (2) improve dependency vulnerability search behavior by applying the search term to the package aggregation query as well.

Changes:

  • Added a generic DeduplicateSlice helper in utils.
  • Deduplicated CSAF yearly report entries by CVEID before building the HTML index.
  • Added search filtering to the packageNameQuery used in dependency vuln paging/aggregation.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.

File Description
utils/common.go Adds a generic deduplication helper used to remove duplicates from slices.
database/repositories/dependency_vuln_repository.go Applies the search term to the aggregation query used to derive package-level paging.
controllers/csaf_controller.go Uses the new dedup helper to avoid listing the same CVE multiple times in CSAF yearly listings.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

timbastin and others added 2 commits February 6, 2026 20:22
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Tim Bastin <38261809+timbastin@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Tim Bastin <38261809+timbastin@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants