security/go-cve-dictionary 0.16.2_7
Build local copies of vulnerabilities from NVD and JVN
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
d81b7ba3c3- License
- APACHE20
- Categories
- security
- Package size
- 6916.3 KiB, 24480.9 KiB installed
Description
go-cve-dictionary builds a local copy of the National Vulnerabilities Database(NVD) and Japan Vulnerability Notes(JVN). NVD and JVN contain security vulnerabilities according to their CVE identifiers including exhaustive information and a risk score. The local copy is generated in a database, using sqlite3, postgres or mysql. A server is included for easy querying.
This program is tightly related to security/vuls, a client binary that is used to report about known vulnerabilities in packages. vuls uses the go-cve-dictionary service when reporting about problems.
Install
As a binary package — by origin, or by package name:
pkg install security/go-cve-dictionary
pkg install go-cve-dictionaryFrom the ports tree:
cd /usr/ports/security/go-cve-dictionary/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= go-cve-dictionary>0:security/go-cve-dictionaryPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 0.16.2_6 | 0.16.2_6 | - | 0.11.0_6 | 0.16.2_6 |
| FreeBSD:14:quarterly | 0.16.2_6 | 0.16.2_6 | n/a | 0.11.0_4 | 0.16.2_6 |
| FreeBSD:15:latest | 0.16.2_6 | 0.16.2_6 | n/a | - | 0.11.0_6 |
| FreeBSD:15:quarterly | 0.16.2_6 | 0.16.2_6 | n/a | n/a | n/a |
| FreeBSD:16:latest | 0.16.2_5 | 0.16.2_6 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Runtime 1
ca_root_nss>=0: security/ca_root_nss
The full lists below include those, and their dependencies in turn.
All build dependencies 1
All run dependencies 1
No port depends on this one.
Configuration
No options to configure.
- USES
- go:modules
- Service scripts
go-cve-dictionary
Message after installing
Congratulations, you have installed go-cve-dictionary! Setup go-cve-dictionary to use you preferred database type and set up access by editing the config file at /usr/local/etc/go-cve-dictionary.yaml. There's a default setup for your convenience using sqlite3, but you can also choose Redis, PostgreSQL or MySQL if you prefer that. go-cve-dictionary does not ship any CVE database. Instead, to download CVEs from 2002 until present and keep them updated, activate the periodic script by running sysrc -f /etc/periodic.conf daily_go_cve_dictionary_enable="YES" Then, to fetch the NVD database of CVEs immediately, run /usr/local/etc/periodic/daily/go-cve-dictionary To enable the go-cve-dictionary service, edit /usr/local/etc/go-cve-dictionary.yaml and set bind and port, and then activate and start the service using: sysrc go_cve_dictionary_enable="YES" service go-cve-dictionary start
Files
pkg-plist 8
- bin/go-cve-dictionary
- etc/periodic/daily/go-cve-dictionary
- @sample etc/newsyslog.conf.d/go-cve-dictionary.conf.sample
- @sample etc/go-cve-dictionary.yaml.sample
- @dir(vuls,vuls,0775) /var/db/vuls
- @dir(vuls,vuls,0775) /var/log/vuls
- @dir etc/newsyslog.conf.d
- @dir etc/periodic/daily
distinfo 2
| File | Size | SHA256 |
|---|---|---|
| go/security_go-cve-dictionary/go-cve-dictionary-v0.16.2/v0.16.2.mod | 3437 | 87ae8d0ac5f5a764529cb6cf589857b1ab0d02d87ba16bafc39b92b7797dc7b1 |
| go/security_go-cve-dictionary/go-cve-dictionary-v0.16.2/v0.16.2.zip | 139646 | e11233b16090917bb530f1e06208a35fc4c2741745503d64b3a0544ddc86c56d |
Commit history 6
The latest 5 of 6 in the history this site was built from.