I've submitted the v3. It fixes the typo, upgrades the warning to
erroronce, but still defaults to NVD2.
One other change is the move to different database file names for each
feed. There might be slight transitional
differences between them depending on the synchronization time. A merge
between sources that are not
in sync could cause strange errors.
Kind regards,
Marta
On Tue, Jan 14, 2025 at 6:54 PM Ross Burton <ross.bur...@arm.com> wrote:
> On 24 Dec 2024, at 10:25, Marta Rybczynska via lists.openembedded.org
> <rybczynska=gmail....@lists.openembedded.org> wrote:
>
> There’s an inconsistency:
>
> > Set the NVD_DB_VERSION variable to choose feed:
> > NVD2 (default) - the NVD feed with API version 2
> > NVD1 - the NVD JSON feed (deprecated)
> > FKIE - the FKIE-CAD feed reconstruction
>
> “NVD1”
>
> > +# Possible database sources: NVD1, NVD2, FKIE
> > +NVD_DB_VERSION ?= "NVD2"
>
> “NVD1”
>
> > + if nvd_database_type not in ("NVD", "NVD2", "FKIE”):
>
> “NVD”
>
> I’m thinking “NVD1” should be used everywhere.
>
> If you set it as the documentation says then every recipe throws a
> warning, which is quite the pastebomb. Might be better to make it
> bb.fatal() and tell the user to fix their typo?
>
> Ross
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#210854):
https://lists.openembedded.org/g/openembedded-core/message/210854
Mute This Topic: https://lists.openembedded.org/mt/110270325/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
