Add headers in pipeline code

Signed-off-by: Tushar Goel <[email protected]>

Author: TG1999

vulnerabilities/models.py

@@ -1799,3 +1799,115 @@ class CodeFix(CodeChange):
         related_name="code_fix",
         help_text="The fixing package version with this code fix",
     )
+
+
+class AdvisoryReference(models.Model):
+    """
+    A reference associated with an advisory.
+    """
+    advisory = models.ForeignKey(
+        'Advisory',
+        on_delete=models.CASCADE,
+        related_name='advisory_references',
+    )
+    reference_id = models.CharField(
+        max_length=200,
+        blank=True,
+        help_text="External reference ID (e.g., CVE-ID, GHSA-ID)",
+    )
+    reference_type = models.CharField(
+        max_length=100,
+        blank=True,
+        help_text="Type of reference (e.g., CVE, GHSA)",
+    )
+    url = models.URLField(
+        help_text="URL of the reference",
+    )
+    severities = models.JSONField(
+        blank=True,
+        default=list,
+        help_text="List of severity scores associated with this reference",
+    )
+
+    class Meta:
+        ordering = ['reference_id', 'url']
+        unique_together = ['advisory', 'reference_id', 'url']
+
+    def to_reference(self):
+        """Convert to importer.Reference object"""
+        from vulnerabilities.importer import Reference, VulnerabilitySeverity
+        return Reference(
+            reference_id=self.reference_id,
+            reference_type=self.reference_type,
+            url=self.url,
+            severities=[VulnerabilitySeverity.from_dict(s) for s in self.severities],
+        )
+
+    @classmethod
+    def from_reference(cls, reference, advisory):
+        """Create from importer.Reference object"""
+        return cls(
+            advisory=advisory,
+            reference_id=reference.reference_id,
+            reference_type=reference.reference_type,
+            url=reference.url,
+            severities=[s.to_dict() for s in reference.severities],
+        )
+
+
+class AdvisoryAffectedPackage(models.Model):
+    """
+    A package affected by a vulnerability as described in an advisory.
+    """
+    advisory = models.ForeignKey(
+        'Advisory',
+        on_delete=models.CASCADE,
+        related_name='advisory_affected_packages',
+    )
+    package = PackageURLMixin()
+    affected_version_range = models.CharField(
+        max_length=1024,
+        blank=True,
+        null=True,
+        help_text="Version range of affected versions",
+    )
+    fixed_version = models.CharField(
+        max_length=100,
+        blank=True,
+        null=True,
+        help_text="Version that fixes the vulnerability",
+    )
+
+    class Meta:
+        ordering = ['package']
+        unique_together = ['advisory', 'package', 'affected_version_range', 'fixed_version']
+
+    def to_affected_package(self):
+        """Convert to importer.AffectedPackage object"""
+        from vulnerabilities.importer import AffectedPackage
+        from univers.version_range import VersionRange
+        from univers.versions import Version
+
+        affected_range = None
+        if self.affected_version_range:
+            affected_range = VersionRange.from_string(self.affected_version_range)
+
+        fixed = None
+        if self.fixed_version:
+            fixed = Version(self.fixed_version)
+
+        return AffectedPackage(
+            package=self.package,
+            affected_version_range=affected_range,
+            fixed_version=fixed,
+        )
+
+    @classmethod
+    def from_affected_package(cls, affected_package, advisory):
+        """Create from importer.AffectedPackage object"""
+        return cls(
+            advisory=advisory,
+            package=affected_package.package,
+            affected_version_range=str(affected_package.affected_version_range) if affected_package.affected_version_range else None,
+            fixed_version=str(affected_package.fixed_version) if affected_package.fixed_version else None,
+        )

vulnerabilities/pipelines/fill_vulnerability_summary_pipeline.py

@@ -1,3 +1,12 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/aboutcode-org/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+
 import logging
 
 from django.db.models import Q