Skip to content

test(resolver): add vendor-specific CVE resolution and structured API tests - #57

Merged
kurtseifried merged 1 commit into
mainfrom
test/vendor-specific-cve-resolution
Nov 3, 2026
Merged

kurtseifried merged 1 commit into
mainfrom
test/vendor-specific-cve-resolution

Conversation

@kurtseifried

Copy link
Copy Markdown
Contributor

Agent: Gemini (SecID governing agent)

Summary

Adds permanent regression tests in test/resolver.test.ts for vendor-specific CVE resolution and ?parsability=structured filtering across:

  • Red Hat (redhat.com/cve & redhat.com/bugzilla): CVE-2023-44487 (HTML + Hydra JSON API)
  • Microsoft (microsoft.com/msrc): CVE-2024-21412 (HTML + SUG v2.0 JSON API)
  • Palo Alto Networks (paloaltonetworks.com/pan-sa): CVE-2024-3400 (HTML + CVE JSON 5.x + CSAF JSON)
  • Ubuntu (ubuntu.com/cve-tracker): CVE-2024-3094 (/security/{id} HTML + /security/cves/{id}.json JSON, verifying the old 404 /security/cves/{id} HTML URL is absent)
  • SUSE (suse.com/cve & suse.com/bugzilla): CVE-2023-44487
  • Debian (debian.org/tracker): CVE-2023-44487
  • Oracle (oracle.com/alert): CVE-2021-44228 ({id_lower} substitution)
  • CISA (cisa.gov/vulnrichment): CVE-2024-3400 (2024/3xxx/CVE-2024-3400.json)

Refs CloudSecurityAlliance/SecID#218

… tests

- Add regression tests in test/resolver.test.ts covering vendor-specific CVEs across Red Hat (CVE-2023-44487), Microsoft MSRC (CVE-2024-21412), Palo Alto Networks (CVE-2024-3400), Ubuntu CVE Tracker (CVE-2024-3094), SUSE CVE Database & Bugzilla (CVE-2023-44487), Debian Security Tracker (CVE-2023-44487), Oracle Security Alert (CVE-2021-44228), and CISA Vulnrichment (CVE-2024-3400)
- Verify both HTML and ?parsability=structured JSON resolution across vendor endpoints

Refs CloudSecurityAlliance/SecID#218

AI-Agent: Gemini
@kurtseifried

Copy link
Copy Markdown
Contributor Author

Agent: Gemini (SecID governing agent)

Two-Review Summary

  1. Author review (Gemini): Verified all 6 vendor-specific CVE and ?parsability=structured regression tests in test/resolver.test.ts pass against registry commit 7678efe (924 passed across 17 test files and npm run typecheck clean).
  2. Independent fresh-context review (OpenAI Codex gpt-6-astra, session 01a1a1ee-cb1a-7662-b86f-911b71be2981):
    • Findings: None ("No actionable findings in main...HEAD for PR test(resolver): add vendor-specific CVE resolution and structured API tests #57. The six tests follow existing patterns in test/resolver.test.ts:437. URL expectations match the registry, including Ubuntu's separate HTML/JSON paths, SUSE's .html suffix, Oracle's lowercase identifier, and CISA's 2024/3xxx bucket. Exact structured-result assertions catch missing JSON endpoints and unwanted HTML URLs.").

Merging now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant