feat: added ci script that updates mismatch database (#4236)

* feat: added script to populate deduplication database Signed-off-by: Meet Soni <[email protected]> * refactor: improved naming in the populator script Signed-off-by: Meet Soni <[email protected]> * fix: bypassing diff * feat: added ci script that updates mismatch database Signed-off-by: Meet Soni <[email protected]> * fix: improved logic Signed-off-by: Meet Soni <[email protected]> * fix: retrying tests * feat: required changes Signed-off-by: Meet Soni <[email protected]> --------- Signed-off-by: Meet Soni <[email protected]> Co-authored-by: Terri Oda <[email protected]>
intel · Jul 18, 2024 · d815e3a · d815e3a
1 parent 1d09c74
commit d815e3a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/.github/workflows/update-cache.yml b/.github/workflows/update-cache.yml
@@ -1,6 +1,11 @@
 name: Update cached database
 
 on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'data/**'
   schedule:
     # Runs at 00:20 UTC everyday
     - cron: '20 0 * * *'
@@ -49,6 +54,7 @@ jobs:
         run: |
           [[ -e cache ]] && mkdir -p .cache && mv cache ~/.cache/cve-bin-tool
           python -m cve_bin_tool.cli test/assets/test-kerberos-5-1.15.1.out -u now
+          python -m cve_bin_tool.mismatch_loader
           cp -r ~/.cache/cve-bin-tool cache
 
 # Windows cache is currently disabled.
diff --git a/cve_bin_tool/cvedb.py b/cve_bin_tool/cvedb.py
@@ -526,7 +526,6 @@ def populate_db(self) -> None:
         self.populate_metrics()
         # EPSS uses metrics table to get the EPSS metric id.
         # It can't be run before creation of metrics table.
-        self.populate_purl2cpe()
 
         for idx, data in enumerate(self.data):
             _, source_name = data
@@ -539,6 +538,9 @@ def populate_db(self) -> None:
             # if source_name != "NVD" and cve_data[0] is not None:
             #    cve_data = self.update_vendors(cve_data)
 
+            if source_name == "PURL2CPE":
+                self.populate_purl2cpe()
+
             if source_name == "EPSS":
                 if cve_data is not None:
                     self.store_epss_data(cve_data)