fedcode-next: Create pipeline to unfurl version ranges #1967

Activity

1. TG1999

   added a parent issue on Jul 24, 2025

   • VCIO-next: Improve advisories model and update pipelines #1944
2. github-project-automation

   added this to 00-AboutCodePlanneron Jul 24, 2025
3. TG1999

   assigned

   keshav-space

   on Jul 24, 2025
4. pombredanne

   added

   Priority: high

   on Jul 30, 2025
5. pombredanne

   removed a parent issue on Jul 30, 2025

   • VCIO-next: Improve advisories model and update pipelines #1944
6. pombredanne

   moved this to Todo ready in 00-AboutCodePlanneron Jul 30, 2025
7. pombredanne

   changed the title [-]VCIO-next: Create pipeline to unfurl version ranges[/-] [+]Create pipeline to unfurl version ranges[/+] on Jul 30, 2025
8. pombredanne

   added a parent issue on Aug 4, 2025

   • fedcode-next: Code, UI and models to curate PURL and VERS package version range for packages affected and fixing a vulnerability #1717
9. keshav-space

   moved this from Todo ready to In progress in 00-AboutCodePlanneron Aug 11, 2025
10. keshav-space

    moved this from In progress to Todo ready in 00-AboutCodePlanneron Aug 12, 2025
11. keshav-space

    moved this from Todo ready to In review in 00-AboutCodePlanneron Sep 9, 2025
12. keshav-space

    closed this as completedin #1995on Sep 15, 2025
13. github-project-automation

    moved this from In review to Done in 00-AboutCodePlanneron Sep 15, 2025
14. pombredanne

    moved this from Done to In validation in 00-AboutCodePlanneron Oct 5, 2025
15. keshav-space commented on Nov 14, 2025

    

    keshav-space

    on Nov 14, 2025

    Member

    More actions

    This is now completed in #1995

    The simplest way to try this out is:

    • For a local development setup:

      python manage.py import nginx_importer
      python manage.py improve unfurl_version_range_v2

      This will import Nginx advisories and unfurl the version range from the advisories.

    • On Docker simply run:

      docker compose build
      docker compose up -d

      This will automatically run the improvers and importer in dedicated queues and all version ranges will be resolved to concrete package versions.
16. pombredanne

    moved this from In validation to Validated in 00-AboutCodePlanneron Dec 9, 2025
17. pombredanne

    changed the title [-]Create pipeline to unfurl version ranges[/-] [+]fedcode-next: Create pipeline to unfurl version ranges[/+] on May 12, 2026