Merge all changes

2026-01-08 08:54:27 +02:00
parent 589de352c2
commit 110591d6bf
381 changed files with 2237 additions and 1939 deletions
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/Internal/CccsHtmlParser.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/Internal/CccsHtmlParser.cs
@@ -359,7 +359,7 @@ public sealed class CccsHtmlParser

        var candidate = href.Trim();
        var hasAbsolute = Uri.TryCreate(candidate, UriKind.Absolute, out var absolute);
-        if (!hasAbsolute || string.Equals(absolute.Scheme, Uri.UriSchemeFile, StringComparison.OrdinalIgnoreCase))
+        if (!hasAbsolute || absolute is null || string.Equals(absolute.Scheme, Uri.UriSchemeFile, StringComparison.OrdinalIgnoreCase))
        {
            if (baseUri is null || !Uri.TryCreate(baseUri, candidate, out absolute))
            {
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/CertCcConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/CertCcConnector.cs
@@ -177,7 +177,7 @@ public sealed class CertCcConnector : IFeedConnector
                        await _documentStore.UpdateStatusAsync(result.Document.Id, DocumentStatuses.Mapped, cancellationToken).ConfigureAwait(false);
                    }

-                    if (!shouldProcessNotes)
+                    if (!shouldProcessNotes || result.Document is null)
                    {
                        continue;
                    }
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/Internal/CertCcCursor.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/Internal/CertCcCursor.cs
@@ -168,7 +168,7 @@ internal sealed record CertCcCursor(
            }

            var bytes = binary.AsByteArray;
-            if (bytes.Length == 16)
+            if (bytes is not null && bytes.Length == 16)
            {
                guid = new Guid(bytes);
                return true;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/DebianConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/DebianConnector.cs
@@ -605,7 +605,7 @@ public sealed class DebianConnector : IFeedConnector
        {
            ["advisoryId"] = dto.AdvisoryId,
            ["sourcePackage"] = dto.SourcePackage,
-            ["title"] = dto.Title,
+            ["title"] = dto.Title ?? string.Empty,
            ["description"] = dto.Description ?? string.Empty,
            ["cves"] = new DocumentArray(dto.CveIds),
            ["packages"] = packages,
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/Internal/RedHatMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/Internal/RedHatMapper.cs
@@ -29,7 +29,12 @@ internal static class RedHatMapper
        ArgumentNullException.ThrowIfNull(payload);

        var csaf = JsonSerializer.Deserialize<RedHatCsafEnvelope>(payload.RootElement.GetRawText(), SerializerOptions);
-        var documentSection = csaf?.Document;
+        if (csaf is null)
+        {
+            return null;
+        }
+
+        var documentSection = csaf.Document;
        if (documentSection is null)
        {
            return null;
@@ -722,7 +727,7 @@ internal sealed class RedHatProductIndex
        return new RedHatProductIndex(products);
    }

-    public bool TryGetValue(string productId, out RedHatProductNode node)
+    public bool TryGetValue(string productId, [System.Diagnostics.CodeAnalysis.NotNullWhen(true)] out RedHatProductNode? node)
        => _products.TryGetValue(productId, out node);

    private static void Traverse(RedHatProductBranch? branch, IDictionary<string, RedHatProductNode> products)
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Epss/Internal/EpssConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Epss/Internal/EpssConnector.cs
@@ -464,7 +464,7 @@ public sealed class EpssConnector : IFeedConnector
            ["epss.file"] = GetSnapshotFileName(fetchResult.SnapshotDate)
        };

-        if (_options.AirgapMode)
+        if (_options.AirgapMode && fetchResult.Content is not null)
        {
            TryApplyBundleManifest(fetchResult.SnapshotDate, fetchResult.Content, metadata);
        }
@@ -473,6 +473,11 @@ public sealed class EpssConnector : IFeedConnector
        // Use existing ID or derive deterministic ID from source + uri
        var recordId = existing?.Id ?? ComputeDeterministicId(SourceName, fetchResult.SourceUri);

+        if (fetchResult.Content is null)
+        {
+            throw new InvalidOperationException($"EPSS fetch returned null content for {fetchResult.SourceUri}");
+        }
+
        await _rawDocumentStorage.UploadAsync(
            SourceName,
            fetchResult.SourceUri,
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/IcsCisaConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/IcsCisaConnector.cs
@@ -25,8 +25,6 @@ using StellaOps.Concelier.Connector.Ics.Cisa.Configuration;
 using StellaOps.Concelier.Connector.Ics.Cisa.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Normalization.SemVer;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/Internal/JvnAdvisoryMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/Internal/JvnAdvisoryMapper.cs
@@ -7,7 +7,6 @@ using StellaOps.Concelier.Normalization.Cvss;
 using StellaOps.Concelier.Normalization.Identifiers;
 using StellaOps.Concelier.Normalization.Text;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.JpFlags;

 namespace StellaOps.Concelier.Connector.Jvn.Internal;
@@ -68,7 +67,7 @@ internal static class JvnAdvisoryMapper
        var flag = new JpFlagRecord(
            detail.VulnerabilityId,
            JvnConnectorPlugin.SourceName,
-            detail.JvnCategory,
+            detail.JvnCategory ?? string.Empty,
            vendorStatus,
            timeProvider.GetUtcNow());

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/JvnConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/JvnConnector.cs
@@ -13,8 +13,6 @@ using StellaOps.Concelier.Connector.Jvn.Configuration;
 using StellaOps.Concelier.Connector.Jvn.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.JpFlags;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/KevConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/KevConnector.cs
@@ -18,8 +18,6 @@ using StellaOps.Concelier.Connector.Kev.Configuration;
 using StellaOps.Concelier.Connector.Kev.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/KisaConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/KisaConnector.cs
@@ -14,8 +14,6 @@ using StellaOps.Concelier.Connector.Kisa.Configuration;
 using StellaOps.Concelier.Connector.Kisa.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/Internal/OsvMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/Internal/OsvMapper.cs
@@ -10,7 +10,6 @@ using StellaOps.Concelier.Normalization.Identifiers;
 using StellaOps.Concelier.Normalization.Text;
 using StellaOps.Concelier.Connector.Common;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;

 namespace StellaOps.Concelier.Connector.Osv.Internal;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/RuBduConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/RuBduConnector.cs
@@ -17,8 +17,6 @@ using StellaOps.Concelier.Connector.Ru.Bdu.Configuration;
 using StellaOps.Concelier.Connector.Ru.Bdu.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Plugin;
 using StellaOps.Cryptography;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/RuNkckiConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/RuNkckiConnector.cs
@@ -18,8 +18,6 @@ using StellaOps.Concelier.Connector.Ru.Nkcki.Configuration;
 using StellaOps.Concelier.Connector.Ru.Nkcki.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Plugin;
 using StellaOps.Cryptography;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/StellaOpsMirrorConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/StellaOpsMirrorConnector.cs
@@ -14,8 +14,6 @@ using StellaOps.Concelier.Connector.StellaOpsMirror.Settings;
 using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Plugin;
 using StellaOps.Cryptography;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/AdobeConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/AdobeConnector.cs
@@ -18,8 +18,6 @@ using StellaOps.Concelier.Connector.Vndr.Adobe.Configuration;
 using StellaOps.Concelier.Connector.Vndr.Adobe.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;
 using StellaOps.Concelier.Models;
 using StellaOps.Cryptography;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/AppleConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/AppleConnector.cs
@@ -16,8 +16,6 @@ using StellaOps.Concelier.Connector.Common.Fetch;
 using StellaOps.Concelier.Connector.Vndr.Apple.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/Internal/AppleIndexEntry.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/Internal/AppleIndexEntry.cs
@@ -118,23 +118,24 @@ internal static class AppleIndexParser
        return entries.Count == 0 ? Array.Empty<AppleIndexEntry>() : entries;
    }

-    private static bool TryResolveDetailUri(AppleIndexEntryDto dto, Uri baseUri, out Uri uri)
+    private static bool TryResolveDetailUri(AppleIndexEntryDto dto, Uri baseUri, [System.Diagnostics.CodeAnalysis.NotNullWhen(true)] out Uri? uri)
    {
-        if (!string.IsNullOrWhiteSpace(dto.DetailUrl) && Uri.TryCreate(dto.DetailUrl, UriKind.Absolute, out uri))
+        if (!string.IsNullOrWhiteSpace(dto.DetailUrl) && Uri.TryCreate(dto.DetailUrl, UriKind.Absolute, out var parsedUri))
        {
+            uri = parsedUri;
            return true;
        }

        if (string.IsNullOrWhiteSpace(dto.ArticleId))
        {
-            uri = default!;
+            uri = null;
            return false;
        }

        var article = dto.ArticleId.Trim();
        if (article.Length == 0)
        {
-            uri = default!;
+            uri = null;
            return false;
        }

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/Internal/AppleMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/Internal/AppleMapper.cs
@@ -5,7 +5,6 @@ using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Connector.Common;
 using StellaOps.Concelier.Connector.Common.Packages;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;

 namespace StellaOps.Concelier.Connector.Vndr.Apple.Internal;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/ChromiumConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/ChromiumConnector.cs
@@ -14,8 +14,6 @@ using StellaOps.Concelier.Connector.Vndr.Chromium.Configuration;
 using StellaOps.Concelier.Connector.Vndr.Chromium.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/Internal/ChromiumCursor.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/Internal/ChromiumCursor.cs
@@ -69,7 +69,7 @@ internal sealed record ChromiumCursor(
    public ChromiumCursor WithFetchCache(IDictionary<string, ChromiumFetchCacheEntry> cache)
        => this with { FetchCache = cache is null ? new Dictionary<string, ChromiumFetchCacheEntry>(StringComparer.Ordinal) : new Dictionary<string, ChromiumFetchCacheEntry>(cache, StringComparer.Ordinal) };

-    public bool TryGetFetchCache(string key, out ChromiumFetchCacheEntry entry)
+    public bool TryGetFetchCache(string key, [System.Diagnostics.CodeAnalysis.NotNullWhen(true)] out ChromiumFetchCacheEntry? entry)
        => FetchCache.TryGetValue(key, out entry);

    private static DateTimeOffset? ReadDateTime(DocumentValue value)
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/CiscoConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/CiscoConnector.cs
@@ -12,8 +12,6 @@ using StellaOps.Concelier.Connector.Vndr.Cisco.Configuration;
 using StellaOps.Concelier.Connector.Vndr.Cisco.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/Internal/CiscoMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/Internal/CiscoMapper.cs
@@ -4,7 +4,6 @@ using System.Linq;
 using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Connector.Common.Packages;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Normalization.SemVer;

 namespace StellaOps.Concelier.Connector.Vndr.Cisco.Internal;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/MsrcConnector.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/MsrcConnector.cs
@@ -17,8 +17,6 @@ using StellaOps.Concelier.Connector.Vndr.Msrc.Configuration;
 using StellaOps.Concelier.Connector.Vndr.Msrc.Internal;
 using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.Advisories;
-using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Cryptography;
 using StellaOps.Plugin;

--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/Internal/OracleMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/Internal/OracleMapper.cs
@@ -5,7 +5,6 @@ using System.Text.RegularExpressions;
 using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Connector.Common.Packages;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;

 namespace StellaOps.Concelier.Connector.Vndr.Oracle.Internal;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/Internal/VmwareMapper.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/Internal/VmwareMapper.cs
@@ -5,7 +5,6 @@ using StellaOps.Concelier.Models;
 using StellaOps.Concelier.Connector.Common;
 using StellaOps.Concelier.Connector.Common.Packages;
 using StellaOps.Concelier.Storage;
-using StellaOps.Concelier.Storage;
 using StellaOps.Concelier.Storage.PsirtFlags;

 namespace StellaOps.Concelier.Connector.Vndr.Vmware.Internal;
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Persistence/Postgres/Repositories/AdvisoryLinksetCacheRepository.cs
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Persistence/Postgres/Repositories/AdvisoryLinksetCacheRepository.cs
@@ -3,6 +3,7 @@ using System.Text.Json;
 using System.Text.Json.Serialization;
 using Microsoft.Extensions.Logging;
 using Npgsql;
+using NpgsqlTypes;
 using StellaOps.Concelier.Core.Linksets;
 using StellaOps.Concelier.Persistence.Postgres.Models;
 using StellaOps.Infrastructure.Postgres.Repositories;
@@ -127,8 +128,14 @@ public sealed class AdvisoryLinksetCacheRepository

                if (cursor is null)
                {
-                    AddParameter(cmd, "cursor_created_at", DBNull.Value);
-                    AddParameter(cmd, "cursor_advisory_id", DBNull.Value);
+                    cmd.Parameters.Add(new NpgsqlParameter("cursor_created_at", NpgsqlDbType.TimestampTz)
+                    {
+                        Value = DBNull.Value
+                    });
+                    cmd.Parameters.Add(new NpgsqlParameter("cursor_advisory_id", NpgsqlDbType.Text)
+                    {
+                        Value = DBNull.Value
+                    });
                }
                else
                {