ossf/cve-bin-tool

test: improve coverage for data_sources

Open

#4,256 opened on Jul 16, 2024

View on GitHubContributor guide
 (0 comments) (0 reactions) (0 assignees)Python (646 forks)auto 404
hacktoberfest

Repository metrics

Stars
 (1,738 stars)
PR merge metrics
 (PR metrics pending)

Description

i'll update the issue with further details:

  • rsd_source test not present, i haven't investigated this related PR for now #2368
  • nvd api 2 test having problem in previous attempts i2334
  • testing download_epss_data() in epss_source if for case where epss_scores-current.csv doesn't exist.
  • some others in osv source(will get more details)
  • for redhat_source cases other then incremental update(line 101) and exception blocks not being covered.
  • some minor cases in gad_source see codecov

Contributor guide

Research direction
Look at the existing tests in the data sources directory and add tests for the uncovered code paths mentioned: rsd source, nvd api 2, epss source, osv source, redhat source, and gad source. Follow the test patterns already used in the project.
Tech stack
python
Domain
backendtesting
Issue type
Test
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitPython
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65