fleet/server/vulnerabilities
Ian Littman 605779eee3
Warn on CVE description language tags from NVD feed that we haven't seen before (#21310)
We may need more effort to alert on this in a place where we can
see/action it, but for that alerting we can just catch warn (or
warn-and-above) logs, as I just ran the artifact build command and
didn't get any warnings.

Confirmed that this works by starting without the "es" case (since I
wasn't sure which language tags other than "en" and "en-US" we were
seeing) and seeing a bunch of CVEs from 2004 with "es" language tags
reported as warnings. Also confirmed (`gzcat
cvefeed/nvdcve-1.1-2024.json.gz | grep -A 5 -B 5 "description_data"`)
that language tags were correctly set in the resulting feed (caught a
bug locally due to Golang having an implied break at the end of each
switch case).

# Checklist for submitter

- [x] Manual QA for all new/changed functionality
2024-08-19 10:42:24 -05:00
..
customcve Custom Vulnerability Matching (#20118) 2024-07-09 11:50:22 -06:00
io Moving Go integration tests to integration test job (#21126) 2024-08-07 14:00:25 +02:00
macoffice Moving Go integration tests to integration test job (#21126) 2024-08-07 14:00:25 +02:00
msrc Update Windows OS Version Reporting (#17682) 2024-05-01 12:02:16 -06:00
nvd Warn on CVE description language tags from NVD feed that we haven't seen before (#21310) 2024-08-19 10:42:24 -05:00
oval Custom Vulnerability Matching (#20118) 2024-07-09 11:50:22 -06:00
testdata Handle flaky vulnerability tests (#11262) 2023-04-21 19:37:29 -04:00
utils friday tidy up party (#18106) 2024-04-08 08:42:42 -03:00