Skip to content

feat: add script to extract CVE info from projects #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
jgbernalp wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

feat: add script to extract CVE info from projects #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8af42d0
feat: add script to extract CVE info from projects
jgbernalp Jun 29, 2026
8af4217
feat: update cve script
PeterYurkovich Jun 29, 2026
0fc3a1f
fix: add missing tp
PeterYurkovich Jun 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions tasks/script-to-extract-fixed-cves/component-mapping.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
logging-view-plugin 6.0 release-6.0 release-coo-ocp-4.12 GA ui-logging-pf4 4.12, 4.13, 4.14 COO 1.5.0 logging-console-plugin-pf4
logging-view-plugin 6.1 release-6.1 release-coo-ocp-4.15 GA ui-logging-pf5 4.15, 4.16, 4.17, 4,18, 4.19, 4.20, 4.21 COO
1.5.0 logging-console-plugin-pf5 logging-view-plugin 6.2 release-6.2 release-coo-ocp-4.22 GA ui-logging 4.22 COO 1.5.0 logging-console-plugin
console-dashboards-plugin 0.4 release-0.4 release-coo-ocp-4.12 DP ui-dashboards 4.12, 4.13, 4.14, 4.15, 4.16, 4.17, 4.18, 4.19, 4.20, 4.21, 4.22 COO
1.5.0 dashboards-console-plugin distributed-tracing-console-plugin 0.3 release-0.3 release-coo-ocp-4.12 TP ui-distributed-tracing-pf4 4.12, 4.13,
4.14 COO 1.5.0 distributed-tracing-console-plugin-pf4
distributed-tracing-console-plugin 0.4 release-0.4 release-coo-ocp-4.15 TP ui-distributed-tracing-pf5 4.15, 4.16, 4.17, 4.18 COO
1.5.0 distributed-tracing-console-plugin-pf5
distributed-tracing-console-plugin 1.0 release-1.0 release-coo-ocp-4.19 GA ui-distributed-tracing-pf6 4.19, 4.20, 4.21 COO
1.5.0 distributed-tracing-console-plugin-pf6
distributed-tracing-console-plugin 1.1 release-1.1 release-coo-ocp-4.22 GA ui-distributed-tracing 4.22 COO 1.5.0 distributed-tracing-console-plugin
troubleshooting-panel-console-plugin 0.4 release-0.4 release-coo-ocp-4.19 GA ui-troubleshooting-panel-pf6 4.19, 4.20, 4.21 COO
1.5.0 troubleshooting-panel-console-plugin-pf6
troubleshooting-panel-console-plugin 1.0 release-1.0 release-coo-ocp-4.22 GA ui-troubleshooting-panel 4.22 COO
1.5.0 troubleshooting-panel-console-plugin monitoring-console-plugin 0.4 release-coo-0.4 release-coo-ocp-4.15 DP ui-monitoring-pf5 4.15, 4.16, 4.17,
4.18 COO 1.5.0 monitoring-console-plugin-pf5 monitoring-console-plugin 0.5 release-coo-0.5 release-coo-ocp-4.19 GA ui-monitoring-pf6 4.19, 4.20,
4.21 COO 1.5.0 monitoring-console-plugin-pf6 monitoring-console-plugin 1.0 release-coo-1.0 release-coo-ocp-4.22 GA ui-monitoring 4.22 COO
1.5.0 monitoring-console-plugin
67 changes: 67 additions & 0 deletions tasks/script-to-extract-fixed-cves/config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
default_rollback: 3

entries:
- project: perses-operator
branch: release-coo-1.5
component: perses-operator-1-5
rollback: 3

- project: monitoring-plugin
branch: release-coo-ocp-4.15
component: monitoring-console-plugin-pf5-1-5
rollback: 2

- project: monitoring-plugin
branch: release-coo-ocp-4.19
component: monitoring-console-plugin-pf6-1-5
rollback: 2

- project: monitoring-plugin
branch: release-coo-ocp-4.22
component: monitoring-console-plugin-1-5
rollback: 2

- project: logging-view-plugin
branch: release-coo-ocp-4.12
component: logging-console-plugin-pf4-1-5
rollback: 2

- project: logging-view-plugin
branch: release-coo-ocp-4.15
component: logging-console-plugin-pf5-1-5
rollback: 2

- project: logging-view-plugin
branch: release-coo-ocp-4.22
component: logging-console-plugin-1-5
rollback: 2

- project: distributed-tracing-plugin
branch: release-coo-ocp-4.12
component: distributed-tracing-console-plugin-pf4-1-5
rollback: 2

- project: distributed-tracing-plugin
branch: release-coo-ocp-4.15
component: distributed-tracing-console-plugin-pf5-1-5
rollback: 2

- project: distributed-tracing-plugin
branch: release-coo-ocp-4.19
component: distributed-tracing-console-plugin-pf6-1-5
rollback: 2

- project: distributed-tracing-plugin
branch: release-coo-ocp-4.22
component: distributed-tracing-console-plugin-1-5
rollback: 2

- project: troubleshooting-panel-plugin
branch: release-coo-ocp-4.19
component: troubleshooting-panel-console-plugin-pf6-1-5
rollback: 2

- project: troubleshooting-panel-plugin
branch: release-coo-ocp-4.22
component: troubleshooting-panel-console-plugin-1-5
rollback: 2
27 changes: 27 additions & 0 deletions tasks/script-to-extract-fixed-cves/cve-matrix-output.csv
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
Component,CVE-2026-27137,CVE-2026-42508,CVE-2026-40179,CVE-2026-39883,CVE-2026-39828,CVE-2026-39832,CVE-2026-39821,CVE-2026-44973,CVE-2026-39831,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-39829,CVE-2026-46598,CVE-2026-46597,CVE-2026-39835,CVE-2026-39830,CVE-2026-33814,CVE-2026-39882,CVE-2026-29181,CVE-2026-42151,CVE-2026-42154,CVE-2026-44740,CVE-2026-41567,CVE-2026-46595,CVE-2020-7753,CVE-2021-33623,CVE-2024-4068,CVE-2024-45338,CVE-2024-52011,CVE-2025-22868,CVE-2025-22870,CVE-2025-22872,CVE-2025-47911,CVE-2025-58190,CVE-2026-12143,CVE-2026-12151,CVE-2026-1526,CVE-2026-1528,CVE-2026-2229,CVE-2026-25680,CVE-2026-29063,CVE-2026-32141,CVE-2026-33228,CVE-2026-33671,CVE-2026-33891,CVE-2026-33894,CVE-2026-33895,CVE-2026-33896,CVE-2026-33937,CVE-2026-33938,CVE-2026-33939,CVE-2026-33940,CVE-2026-33941,CVE-2026-39824,CVE-2026-42506,CVE-2026-44705,CVE-2026-44728,CVE-2026-4800,CVE-2026-4867,CVE-2026-48779,CVE-2026-48801,CVE-2026-6321,CVE-2026-6322,CVE-2026-6734,CVE-2026-9277,CVE-2026-9697
Solution,,,,,,,Updated golang.org/x/net in go.mod,,,Updated golang.org/x/net in go.mod,Updated golang.org/x/net in go.mod,Updated golang.org/x/net in go.mod,,,,,,Updated golang.org/x/net in go.mod,,,,,,,,Updated trim in package.json,Updated trim-newlines in package.json,Updated braces in package.json,Updated golang.org/x/net in go.mod,Updated launch-editor in package.json,Updated golang.org/x/oauth2 in go.mod,Updated golang.org/x/net in go.mod,Updated golang.org/x/net in go.mod,Updated golang.org/x/net in go.mod,Updated golang.org/x/net in go.mod,Updated form-data in package.json,Updated undici in package.json,Updated undici in package.json,Updated undici in package.json,Updated undici in package.json,Updated golang.org/x/net in go.mod,Updated immutable in package.json,Updated flatted in package.json,Updated flatted in package.json,Updated picomatch in package.json,Updated node-forge in package.json,Updated node-forge in package.json,Updated node-forge in package.json,Updated node-forge in package.json,Updated handlebars in package.json,Updated handlebars in package.json,Updated handlebars in package.json,Updated handlebars in package.json,Updated handlebars in package.json,Updated golang.org/x/sys in go.mod,Updated golang.org/x/net in go.mod,Updated tmp in package.json,Updated @babel/plugin-transform-modules-systemjs in package.json,Updated lodash in package.json,Updated path-to-regexp in package.json,Updated ws in package.json,Updated linkify-it in package.json,Updated fast-uri in package.json,Updated fast-uri in package.json,Updated undici in package.json,Updated shell-quote in package.json,Updated undici in package.json
alertmanager-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-health-analyzer-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-observability-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-observability-operator-bundle-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
dashboards-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
distributed-tracing-console-plugin-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,,,,,,X,X,,,,X,,,,,,,,,,,,,,X,X,X,X,,,X,,X,X,X,X,X
distributed-tracing-console-plugin-pf4-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,X,X,X,,,,X,X,X,X,X,X,,,,X,,,,,,,,,,,,,,X,X,X,X,,,X,,X,X,X,X,X
distributed-tracing-console-plugin-pf5-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,,,,,,X,X,,,,X,,,,,,,,,,,,,,X,X,X,X,,,X,,X,X,X,X,X
distributed-tracing-console-plugin-pf6-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,,,,,,X,X,,,,X,,,,,,,,,,,,,,X,X,X,X,,,X,,X,X,X,X,X
korrel8r-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
logging-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,X,X,,,,,,,,,,,,,,,,,,,,X,X,,,X,,X,X,X,X,X
logging-console-plugin-pf4-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,,X,X,,X,
logging-console-plugin-pf5-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,X,,,,,X,X,X,X,X,X,X,X,X,X,X,X,,X,X,,X,
monitoring-console-plugin-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,X,X,X,X,X,X,X,,,,X,,,,,,,,,,,,,,X,X,X,X,,,X,X,X,X,X,X,X
monitoring-console-plugin-pf5-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,X,X,X,X,X,X,X,,,,X,,,,,,,,,,,,,,X,X,X,,,,X,X,,,X,X,X
monitoring-console-plugin-pf6-1-5,,,,,,,X,,,X,X,X,,,,,,X,,,,,,,,,,,,,X,X,X,X,X,X,X,,,,X,,,,,,,,,,,,,,X,X,X,,,,X,X,,,X,X,X
obo-prometheus-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
obo-prometheus-operator-admission-webhook-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
obo-prometheus-operator-prometheus-config-reloader-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
perses-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
perses-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
prometheus-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
thanos-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
troubleshooting-panel-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,X,X,,,,,,,,,,,,,,,,,,,,X,X,,,X,,X,X,X,X,X
troubleshooting-panel-console-plugin-pf6-1-5,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,X,X,X,X,X,,X,X,X,X,,,,,X,X,X,X,X,,,X,X,X,X,X,,X,X,,X,
27 changes: 27 additions & 0 deletions tasks/script-to-extract-fixed-cves/cve-matrix-template.csv
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
Component,CVE-2026-27137,CVE-2026-42508,CVE-2026-40179,CVE-2026-39883,CVE-2026-39828,CVE-2026-39832,CVE-2026-39821,CVE-2026-44973,CVE-2026-39831,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-39829,CVE-2026-46598,CVE-2026-46597,CVE-2026-39835,CVE-2026-39830,CVE-2026-33814,CVE-2026-39882,CVE-2026-29181,CVE-2026-42151,CVE-2026-42154,CVE-2026-44740,CVE-2026-41567,CVE-2026-46595
Solution,,,,,,,,,,,,,,,,,,,,,,,,,
alertmanager-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-health-analyzer-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-observability-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
cluster-observability-operator-bundle-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
dashboards-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
distributed-tracing-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
distributed-tracing-console-plugin-pf4-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
distributed-tracing-console-plugin-pf5-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
distributed-tracing-console-plugin-pf6-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
korrel8r-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
logging-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
logging-console-plugin-pf4-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
logging-console-plugin-pf5-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
monitoring-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
monitoring-console-plugin-pf5-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
monitoring-console-plugin-pf6-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
obo-prometheus-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
obo-prometheus-operator-admission-webhook-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
obo-prometheus-operator-prometheus-config-reloader-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
perses-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
perses-operator-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
prometheus-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
thanos-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
troubleshooting-panel-console-plugin-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
troubleshooting-panel-console-plugin-pf6-1-5,,,,,,,,,,,,,,,,,,,,,,,,,
Loading