feat(redhat): add cve URL

aquasecurity · Jan 17, 2021 · 6eed521 · 6eed521
1 parent 2968c5b
commit 6eed521
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/pkg/vulnsrc/redhat/redhat.go b/pkg/vulnsrc/redhat/redhat.go
@@ -23,6 +23,8 @@ import (
 const (
 	redhatDir      = "redhat"
 	platformFormat = "Red Hat Enterprise Linux %s"
+
+	resourceURL = "https://access.redhat.com/hydra/rest/securitydata/cve/%s.json"
 )
 
 var (
@@ -160,16 +162,16 @@ func (vs VulnSrc) putAdvisoryDetail(tx *bolt.Tx, cve RedhatCVE) error {
 func (vs VulnSrc) putVulnerabilityDetail(tx *bolt.Tx, cve RedhatCVE) error {
 	cvssScore, _ := strconv.ParseFloat(cve.Cvss.CvssBaseScore, 64)
 	cvss3Score, _ := strconv.ParseFloat(cve.Cvss3.Cvss3BaseScore, 64)
-
 	title := strings.TrimPrefix(strings.TrimSpace(cve.Bugzilla.Description), cve.Name)
+	references := append(cve.References, fmt.Sprintf(resourceURL, cve.Name))
 
 	vuln := types.VulnerabilityDetail{
 		CvssScore:    cvssScore,
 		CvssVector:   cve.Cvss.CvssScoringVector,
 		CvssScoreV3:  cvss3Score,
 		CvssVectorV3: cve.Cvss3.Cvss3ScoringVector,
 		Severity:     severityFromThreat(cve.ThreatSeverity),
-		References:   cve.References,
+		References:   references,
 		Title:        strings.TrimSpace(title),
 		Description:  strings.TrimSpace(strings.Join(cve.Details, "")),
 	}