Skip to content

PIPELINES-AVID.rst

Latest commit

 

History

History
143 lines (133 loc) · 3.64 KB

PIPELINES-AVID.rst

File metadata and controls

143 lines (133 loc) · 3.64 KB
Raw

Pipelines AVID Mapping

  • An advisory represents data obtained from an upstream source and transformed into structured data that describes a known vulnerability.

    Each advisory has an upstream Advisory ID (for example, CVE-2026-23918 or GHSA-6xcx-gx7r-rccj) that uniquely identifies it within its datasource.

  • An AVID is the unique identifier for the datasource used for this advisory (datasource_id example: nvd or github_osv).

    A pipeline AVID is constructed by combining the pipeline identifier with the upstream Advisory ID datasource_id/advisory_id. For example:

github_osv/GHSA-6xcx-gx7r-rccj
nvd/CVE-2026-23918

The following table describes how each pipeline constructs its AVID.

Pipeline AVID Mapping
pipeline name datasource_id advisory_id
archlinux_importer_v2 archlinux AVG ID of the record
apache_kafka_importer_v2 apache_kafka CVE ID of the record
nvd_importer_v2 nvd CVE ID of the record
elixir_security_importer_v2 elixir_security {package_name}/{file_id}
npm_importer_v2 npm NPM-<ID>
vulnrichment_importer_v2 vulnrichment CVE ID of the record
apache_httpd_importer_v2 apache_httpd CVE ID of the record
pypa_importer_v2 pypa {package_name}/{ID of the OSV record}
gitlab_importer_v2 gitlab Identifier of the GitLab community advisory record
pysec_importer_v2 pysec ID of the OSV record
xen_importer_v2 xen XSA-<ID>
curl_importer_v2 curl CURL-CVE ID of the record
oss_fuzz_v2 oss_fuzz ID of the OSV record
istio_importer_v2 istio ISTIO-SECURITY-<ID>
postgresql_importer_v2 postgresql CVE ID of the record
mozilla_importer_v2 mozilla MFSA-<ID>
github_osv_importer_v2 github_osv ID of the OSV record
redhat_importer_v2 redhat RHSA ID of the record
aosp_importer_v2 aosp_dataset CVE ID of the record
project_kb_statements_importer_v2 project-kb-statements_v2 CVE ID of the record
project_kb_msr2019_importer_v2 project_kb_msr2019 CVE ID of the record
ruby_importer_v2 ruby_advisory_db {file_id}
epss_importer_v2 epss CVE ID of the record
gentoo_importer_v2 gentoo GLSA ID of the record
nginx_importer_v2 nginx First alias of the record
debian_importer_v2 debian {package_name}/{debian_record_id}
mattermost_importer_v2 mattermost MMSA-<ID>
glibc_importer_v2 glibc GLIBC-SA-<ID>
apache_tomcat_importer_v2 apache_tomcat {page_id}/{cve_id}
suse_score_importer_v2 suse_score CVE ID of the record
retiredotnet_importer_v2 retiredotnet retiredotnet-{file_id}
ubuntu_osv_importer_v2 ubuntu_osv ID of the OSV record
alpine_linux_importer_v2 alpine {package_name}/{distroversion}/{version}/{vulnerability_id}
linux_kernel_importer_v2 linux_kernel CVE ID of the record
openssl_importer_v2 openssl CVE ID of the record
fireeye_importer_v2 fireeye {file_id}
collect_{repo_name}_fix_commits {repo_name}_fix_commits CVE ID / GHSA ID of the record