From 62a25410ccd641206a79616141eb07af154d1f58 Mon Sep 17 00:00:00 2001 From: Alex Tau Date: Fri, 6 Jun 2025 01:14:25 +0300 Subject: [PATCH] update for 25.05 --- flake.nix | 2 +- src/lego_monitoring/checks/vulnix/__init__.py | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/flake.nix b/flake.nix index 6bced14..7fb2bd2 100644 --- a/flake.nix +++ b/flake.nix @@ -1,6 +1,6 @@ { inputs = { - nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11"; + nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05"; pyproject-nix = { url = "github:pyproject-nix/pyproject.nix"; diff --git a/src/lego_monitoring/checks/vulnix/__init__.py b/src/lego_monitoring/checks/vulnix/__init__.py index 302bdc4..b494400 100644 --- a/src/lego_monitoring/checks/vulnix/__init__.py +++ b/src/lego_monitoring/checks/vulnix/__init__.py @@ -28,12 +28,17 @@ def vulnix_check() -> list[Alert]: if len(non_whitelisted_cves) == 0: continue message = f"New findings in derivation {finding.derivation}:" + short_message = f"New findings in {finding.derivation} (short ver):" for cve in non_whitelisted_cves: if cve in finding.cvssv3_basescore: score_str = f"(CVSSv3 = {finding.cvssv3_basescore[cve]})" else: score_str = "(not scored by CVSSv3)" message += f'\n* {cve} - {finding.description[cve]} {score_str}' + short_message += f'\n * {cve}' + + if len(message) > 3700: + message = short_message alert = Alert( alert_type=AlertType.VULN,