Stowage/dependency-track
2
0
Fork 0
mirror of https://github.com/DependencyTrack/dependency-track.git synced 2025-10-19 07:53:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #5418 from stohrendorf/speed-up-vulnerablesoftware-normalization

Browse source
This commit is contained in:
Niklas 2025-10-17 19:24:04 +02:00 • committed by GitHub
commit 389377f46b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/main/java/org/dependencytrack/upgrade/v4135/v4135Updater.java
View file

@ -43,7 +43,13 @@ public class v4135Updater extends AbstractUpgradeItem {
try (final Statement statement = connection.createStatement()) {
LOGGER.info("Normalizing \"VULNERABLESOFTWARE\" CPE columns");
statement.execute(/* language=SQL */ """
UPDATE "VULNERABLESOFTWARE" SET "PART" = LOWER("PART"), "VENDOR" = LOWER("VENDOR"), "PRODUCT" = LOWER("PRODUCT")
UPDATE "VULNERABLESOFTWARE"
SET "PART" = LOWER("PART"),
"VENDOR" = LOWER("VENDOR"),
"PRODUCT" = LOWER("PRODUCT")
WHERE "PART <> LOWER("PART")
OR "VENDOR <> LOWER("VENDOR")
OR "PRODUCT <> LOWER("PRODUCT")"
""");
}
}