Impl (#43)

* mvp-1

* Create deploy-image.yml

* adding docs

* updating docs

* Update .gitignore

* Create LICENSE

* making ARANGODB_DATABASE a variable

* reordering view

* updating docs

* starting to add automated tests

* Update views.py

* Update views.py

* fixing failing import test

* fixing issue with cloudflare url

* return whole object instead of just id for cve #3

* fix volumes

* add summary and desc to cve paths #6

* remove type filter from cpe #9

* remove choice clutter #16

* add dates validation #10

* updating some text

* Update README.md

* add description to all urlparams; #15,#13

* Update views.py

* major update

* remove type from $cwe endpoint #17

* add epss and cvss filters to cve

* add created/modified min/max filters to cve

* add sort to cves

* removing db from env for #5

* Update views.py

* use static database (vulmatch); fix errors in populate_db

* rename object endpoints #23

* use unique summary/desc for attack endpoints #24

* add summary to $cve/versions #25, fix schema

* no auto-import #26

* add version filter to mitre retrive endpoints #11

* remove auth from schema #22

* add $objects views #28

* change 's lookup param #21

* update to docs

* removing old modes

* Update views.py

* Update views.py

* remove reports from $objects #29

* add all related data in bundle #27

* update views

* Update views.py

* remove stix id from path params #35

* remove list filters from retrieve

* add NVD_API_KEY

* updating docs

* add `cve_version` #30

* remove several acp modes #37

* add object_version endpoint #38

* Update vulmatch.png

* adding new vars

---------

Co-authored-by: Fadl <[email protected]>

.env.example

@@ -1,5 +1,7 @@
 # DJANGO
 DJANGO_SECRET=DJANGO_SECRET
+DJANGO_DEBUG=True
+DJANGO_ALLOWED_HOSTS=#MODIFY IT RUNNING ON NON LOCAL SERVERS
 # R2 PATHS
 NVD_BUCKET_ROOT_PATH=https://downloads.ctibutler.com/cxe2stix-helper-github-action-output/
 CWE_BUCKET_ROOT_PATH=https://downloads.ctibutler.com/cwe2stix-manual-output/

vulmatch/settings.py

@@ -27,9 +27,9 @@
 SECRET_KEY = os.environ['DJANGO_SECRET']
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = os.getenv("DEBUG", False)
+DEBUG = os.getenv("DJANGO_DEBUG", False)
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = os.getenv('DJANGO_ALLOWED_HOSTS', "localhost 127.0.0.1 [::1]").split()
 
 MEDIA_ROOT = Path("/var/www/vulmatch_files/media/uploads")