Skip to content

toolkit: tools - #1812

Merged
github-actions[bot] merged 4 commits into
quay:mainfrom
hdonnay:hack/toolkit-tools
Apr 6, 2026
Merged

toolkit: tools#1812
github-actions[bot] merged 4 commits into
quay:mainfrom
hdonnay:hack/toolkit-tools

Conversation

@hdonnay

@hdonnay hdonnay commented Apr 2, 2026

Copy link
Copy Markdown
Member

This moves the toolkit module to using go tool for all the go generate invocations.

As part of this, I discovered that the XML-format CPE Dictionary is no longer available. The test and the fixture generator are updated accordingly.

@hdonnay
hdonnay requested a review from a team as a code owner April 2, 2026 17:30
@hdonnay
hdonnay requested review from crozzy and removed request for a team April 2, 2026 17:30
@hdonnay
hdonnay force-pushed the hack/toolkit-tools branch 3 times, most recently from 16e81d7 to eb353fc Compare April 3, 2026 19:19
hdonnay added 2 commits April 3, 2026 14:38
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: Ibc1ec2ee52d5ea220e665b96094e0a6b6a6a6964
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I4a2187faf63e35d06cf42d0898e5d60b6a6a6964
@hdonnay
hdonnay force-pushed the hack/toolkit-tools branch from eb353fc to 55b60dc Compare April 3, 2026 19:38

@crozzy crozzy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great change

One of the commits looks a little squiff

JJ: See-Also: CLAIRDEV-NNNN
JJ: Closes: #NNNN

wfn, err := Unbind(in)
if err != nil {
t.Fatal(err)
t.Fatalf("%v: %#q", err, in)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is unreachable? I know it existed before

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, in theory we should never hit the error case because NVD validates the CPE Names, but better safe than sorry IMO

@crozzy

crozzy commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

What do you think about a weekly workflow for the dict production that creates a PR, would give us signal if the endpoint disappears again? (separate PR, I can add)

@hdonnay

hdonnay commented Apr 6, 2026

Copy link
Copy Markdown
Member Author

I don't know how useful a periodic rebuild would be, mostly because it'd just be creating lots of binaries. We could not have the list gzipped, but it's massive:

% zcat dictionary.list.gz | wc -l
1548425

hdonnay added 2 commits April 6, 2026 09:47
This also adds some format niceities.

Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I62fcc56ce568f5b22f6fb13f5c486b636a6a6964
Signed-off-by: Hank Donnay <hdonnay@redhat.com>
Change-Id: I8bf2e2bf57e3c8bbfe3a4ed684addb526a6a6964
@hdonnay
hdonnay force-pushed the hack/toolkit-tools branch from 55b60dc to 0c98432 Compare April 6, 2026 14:47
@crozzy
crozzy self-requested a review April 6, 2026 15:26
@hdonnay

hdonnay commented Apr 6, 2026

Copy link
Copy Markdown
Member Author

/fast-forward

@github-actions
github-actions Bot merged commit 0c98432 into quay:main Apr 6, 2026
10 checks passed
@hdonnay
hdonnay deleted the hack/toolkit-tools branch April 6, 2026 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants