dismissed_vuln_checker ¶

Functions:

load_yaml_file –

Safely opens a file, parses its YAML content, and verifies a required root key exists.
load_dismissed_vulnerabilities –
check_dismissed_vulnerabilities_file –

Maps items from dismissed-vulnerabilities.yml into corresponding template action blocks.
check_file_exists –
compare_dismissed_vulnerabilities_with_gitlab_state –

Checks the dismissed vulnerabilities in dismissed-vulnerabilities.yml are still reported as
sync_dismissed_vulnerabilities –

Syncs the dismissed vulnerabilities in dismissed-vulnerabilities.yml with GitLab state.

Attributes:

TARGET_REPO_ROOT –
DISMISSED_VULN_FILE –

TARGET_REPO_ROOT `module-attribute` ¶

TARGET_REPO_ROOT = cwd()

DISMISSED_VULN_FILE `module-attribute` ¶

DISMISSED_VULN_FILE = (
    TARGET_REPO_ROOT / "dismissed-vulnerabilities.yml"
)

load_yaml_file ¶

load_yaml_file(file_path)

Safely opens a file, parses its YAML content, and verifies a required root key exists.

Returns the fully parsed dictionary payload if valid.

load_dismissed_vulnerabilities ¶

load_dismissed_vulnerabilities()

check_dismissed_vulnerabilities_file ¶

check_dismissed_vulnerabilities_file()

Maps items from dismissed-vulnerabilities.yml into corresponding template action blocks.

check_file_exists ¶

check_file_exists()

compare_dismissed_vulnerabilities_with_gitlab_state ¶

compare_dismissed_vulnerabilities_with_gitlab_state()

Checks the dismissed vulnerabilities in dismissed-vulnerabilities.yml are still reported as dismissed from GitLab API

sync_dismissed_vulnerabilities ¶

sync_dismissed_vulnerabilities()

Syncs the dismissed vulnerabilities in dismissed-vulnerabilities.yml with GitLab state. Returns a list of mutations to be made (id, "DISMISS"/"UNDISMISS", category|None) and a report of the actions to be taken.