use of com.synopsys.integration.blackduck.api.manual.component.AffectedProjectVersion in project hub-alert by blackducksoftware.
the class VulnerabilityNotificationDetailExtractorTest method ensureLibraryModelMapsToVulnerabilityUniqueProjectNotificationContent.
@Test
public void ensureLibraryModelMapsToVulnerabilityUniqueProjectNotificationContent() throws IOException {
VulnerabilityNotificationView vulnerabilityNotificationView = getVulnerabilityNotificationView(VULNERABILITY_SIMPLE_JSON_PATH);
VulnerabilityNotificationContent content = vulnerabilityNotificationView.getContent();
AffectedProjectVersion affectedProjectVersion = content.getAffectedProjectVersions().get(0);
VulnerabilityUniqueProjectNotificationContent vulnerabilityUniqueProjectNotificationContent = new VulnerabilityUniqueProjectNotificationContent(content, affectedProjectVersion);
assertEquals("alert-test-project", vulnerabilityUniqueProjectNotificationContent.getAffectedProjectVersion().getProjectName());
assertEquals("Custom Component", vulnerabilityUniqueProjectNotificationContent.getComponentName());
assertEquals("1.0.0", vulnerabilityUniqueProjectNotificationContent.getVersionName());
assertEquals("https://a-hub-server.blackduck.com/api/components/7792be90-bfd2-42d7-ae19-66e051978675/versions/5a01d0b3-a6c4-469a-b9c8-c5769cffae78", vulnerabilityUniqueProjectNotificationContent.getComponentVersion());
VulnerabilitySourceQualifiedId newVuln = vulnerabilityUniqueProjectNotificationContent.getNewVulnerabilityIds().get(0);
VulnerabilitySourceQualifiedId updatedVuln = vulnerabilityUniqueProjectNotificationContent.getUpdatedVulnerabilityIds().get(0);
VulnerabilitySourceQualifiedId deletedVuln = vulnerabilityUniqueProjectNotificationContent.getDeletedVulnerabilityIds().get(0);
assertEquals(VulnerabilitySeverityType.LOW.name(), newVuln.getSeverity());
assertEquals("CVE-2018-0001", newVuln.getVulnerabilityId());
assertEquals(VulnerabilitySeverityType.HIGH.name(), updatedVuln.getSeverity());
assertEquals("CVE-2018-0002", updatedVuln.getVulnerabilityId());
assertEquals(VulnerabilitySeverityType.MEDIUM.name(), deletedVuln.getSeverity());
assertEquals("CVE-2018-0003", deletedVuln.getVulnerabilityId());
}
use of com.synopsys.integration.blackduck.api.manual.component.AffectedProjectVersion in project hub-alert by blackducksoftware.
the class NotificationGeneratorUtils method createCommonContentData.
public static void createCommonContentData(VulnerabilityNotificationContent content) {
AffectedProjectVersion affectedProjectVersion = new AffectedProjectVersion();
affectedProjectVersion.setProjectName("VulnerableProjectName");
affectedProjectVersion.setProjectVersionName("1.2.3");
affectedProjectVersion.setProjectVersion("projectURL");
affectedProjectVersion.setComponentIssueUrl("componentIssueUrl");
content.setComponentVersion("componentversionurl");
content.setComponentName("VulnerableComponent");
content.setVersionName("1.2.3");
content.setComponentVersionOriginName("originName");
content.setAffectedProjectVersions(Arrays.asList(affectedProjectVersion));
content.setComponentVersionOriginId("originId");
}
use of com.synopsys.integration.blackduck.api.manual.component.AffectedProjectVersion in project hub-alert by blackducksoftware.
the class JobNotificationMapperTestIT method createVulnerabilityUniqueProjectNotificationContent.
private VulnerabilityUniqueProjectNotificationContent createVulnerabilityUniqueProjectNotificationContent(String projectName) {
AffectedProjectVersion affectedProjectVersion = new AffectedProjectVersion();
affectedProjectVersion.setProjectName(projectName);
return new VulnerabilityUniqueProjectNotificationContent(new VulnerabilityNotificationContent(), affectedProjectVersion);
}
Aggregations