feat: reimplament vulnerability endpoint logic and api so we can retr…

…ieve purls for affected sboms
trustification · Dec 13, 2024 · 7c2c140 · 7c2c140
1 parent c4a3768
commit 7c2c140
Show file tree

Hide file tree

Showing 9 changed files with 251 additions and 397 deletions.
diff --git a/entity/src/package_relates_to_package.rs b/entity/src/package_relates_to_package.rs
@@ -37,6 +37,12 @@ pub enum Relation {
         to = "super::sbom::Column::SbomId"
     )]
     Sbom,
+    #[sea_orm(
+        belongs_to = "super::sbom_package::Entity",
+        from = "(Column::SbomId, Column::LeftNodeId)",
+        to = "(super::sbom_package::Column::SbomId, super::sbom_package::Column::NodeId)"
+    )]
+    LeftPackage,
 }
 
 impl ActiveModelBehavior for ActiveModel {}

diff --git a/entity/src/product_status.rs b/entity/src/product_status.rs
@@ -50,6 +50,12 @@ pub enum Relation {
         to = "super::cpe::Column::Id"
     )]
     ContextCpe,
+
+    #[sea_orm(belongs_to = "super::base_purl::Entity",
+        from = "Column::Package"
+        to = "super::base_purl::Column::Name"
+    )]
+    BasePurl,
 }
 
 impl Related<super::product_version_range::Entity> for Entity {

diff --git a/entity/src/sbom.rs b/entity/src/sbom.rs
@@ -42,6 +42,12 @@ pub enum Relation {
     PackageRelatesToPackages,
     #[sea_orm(has_one = "super::product_version::Entity")]
     ProductVersion,
+    #[sea_orm(
+        belongs_to = "super::sbom_node::Entity",
+        from = "(Column::NodeId, Column::SbomId)",
+        to = "(super::sbom_node::Column::NodeId, super::sbom_node::Column::SbomId)"
+    )]
+    SbomNode,
 }
 
 pub struct SbomPurlsLink;

diff --git a/entity/src/sbom_node.rs b/entity/src/sbom_node.rs
@@ -37,6 +37,13 @@ pub enum Relation {
         to = "(super::sbom::Column::NodeId, super::sbom::Column::SbomId)"
     )]
     SbomNode,
+    #[sea_orm(
+        belongs_to = "super::package_relates_to_package::Entity",
+        from = "Column::SbomId",
+        to = "super::package_relates_to_package::Column::SbomId",
+        on_condition = r#"super::package_relates_to_package::Column::Relationship.eq(13)"#
+    )]
+    DescribesSbom,
 }
 
 impl Related<super::sbom_package::Entity> for Entity {
@@ -57,4 +64,10 @@ impl Related<super::sbom::Entity> for Entity {
     }
 }
 
+impl Related<super::package_relates_to_package::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::DescribesSbom.def()
+    }
+}
+
 impl ActiveModelBehavior for ActiveModel {}
diff --git a/modules/fundamental/src/purl/model/mod.rs b/modules/fundamental/src/purl/model/mod.rs
@@ -9,7 +9,7 @@ use utoipa::ToSchema;
 pub mod details;
 pub mod summary;
 
-#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema)]
+#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema, Hash)]
 pub struct BasePurlHead {
     /// The ID of the base PURL
     pub uuid: Uuid,
@@ -44,7 +44,7 @@ impl BasePurlHead {
     }
 }
 
-#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema)]
+#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema, Hash)]
 pub struct VersionedPurlHead {
     /// The ID of the versioned PURL
     pub uuid: Uuid,
@@ -74,7 +74,7 @@ impl VersionedPurlHead {
     }
 }
 
-#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema)]
+#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, ToSchema, Hash)]
 pub struct PurlHead {
     /// The ID of the qualified PURL
     pub uuid: Uuid,

diff --git a/modules/fundamental/src/purl/model/summary/purl.rs b/modules/fundamental/src/purl/model/summary/purl.rs
@@ -6,7 +6,7 @@ use std::collections::BTreeMap;
 use trustify_entity::{base_purl, qualified_purl, versioned_purl};
 use utoipa::ToSchema;
 
-#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq, ToSchema)]
+#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq, ToSchema, Hash)]
 pub struct PurlSummary {
     #[serde(flatten)]
     pub head: PurlHead,