Skip to content

Instantly share code, notes, and snippets.

@XDRAGON2002

XDRAGON2002/GSoC'22_Final_Report.md

Last active September 11, 2022 17:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save XDRAGON2002/60f19ae05b7742c39e7588251061c57d to your computer and use it in GitHub Desktop.
Save XDRAGON2002/60f19ae05b7742c39e7588251061c57d to your computer and use it in GitHub Desktop.
Download ZIP
Final Report for Google Summer of Code 2022
Raw
GSoC'22_Final_Report.md

GSoC 2021

Google Summer of Code' 22 Final Report

Phase-1: Create/improve structure of package data parsers and API

Summary:

cve-bin-tool allows scanning of package data files for various languages, but the manner of doing this is very unstructured in nature, moreover there is no code modularity or abstraction. As various commonanilites exist between these parsers, principles of Object Oriented Programming can be used to improve the code quality, moreover the process of adding suport for new languages can be improved as well

Aim:

Improve the code quality and methodology of parsers which includes:

  • Create an OOPs based structure to add parsers
  • Restructure existing parsers to the new format
  • Wrap the parsers under a uniform abstracted API for parsing package data

Tasks Achieved:

Phase-2: Add support for new languages and package managers and improve existing ones

Summary:

cve-bin-tool supports scanning of language data files but the number of supported languages is very less, so in order to improve the detection capabilities of the tool support for more languages needs to be added.

Aim:

Improve the language parsing support of the tool which includes:

  • Add support for new languages
  • Improve support for existing languages

Tasks Achieved:

You can find a detailed description of progress and work done in weekly blogs.

Future Work

I plan on contributing significantly to the project after the GSoC period. Things I plan to do:

  • Further improving the code quality and working on making the codebase future proof.
  • Working with SBOMs and improving the tool to support more formats.
  • Adding support for even more language and further improving the detection capabilities of the tool.

I am thankful to Google, Python Software Foundation, and Intel for providing me with this excellent opportunity and the mentors, Terri Oda, Suhail, and Anthony Harrison, who guided and helped me throughout the program.

I would also like to thank my fellow GSoC contributor Yashu & Rhythm and the cve-bin-tool community for helping me during the program.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment