Re: [OE-core] [PATCH V3 2/3] meta/lib/oe/spdx30_tasks.py: add patched CVE to SPDX 3

2025-01-29 Thread Joshua Watt via lists.openembedded.org
On Wed, Jan 8, 2025 at 9:05 AM Hongxu Jia wrote: > > Due to commit [cve-check: annotate CVEs during analysis][1] improved > get_patched_cves to search for additional CVEs from CVE_STATUS which > means the funciton get_patched_cves contains both of patched CVE and > decoded_status > > This commit a

[OE-core] [PATCH V3 2/3] meta/lib/oe/spdx30_tasks.py: add patched CVE to SPDX 3

2025-01-08 Thread hongxu via lists.openembedded.org
Due to commit [cve-check: annotate CVEs during analysis][1] improved get_patched_cves to search for additional CVEs from CVE_STATUS which means the funciton get_patched_cves contains both of patched CVE and decoded_status This commit add function get_cves to use get_patched_cves in one place to ad