#1775: validate and update CPE vendor and product for all tools by MarvMa · Pull Request #1796 · devonfw/IDEasy

MarvMa · 2026-04-02T11:43:12Z

This PR fixes #1775

Implemented changes:

updated cpe's for all products
removed cpe-vendor and cpe-product for tools where no cpe entry exists on nvd
created a shell-script to verify cpe data using a POST request with search params. (doesn't work for all the CPEs, some needed a manual check)
collect-cpe-report.sh

Checklist for this PR

Make sure everything is checked before merging this PR. For further info please also see
our DoD.

When running mvn clean test locally all tests pass and build is successful
PR title is of the form #«issue-id»: «brief summary» (e.g. #921: fixed setup.bat). If no issue ID exists, title only.
PR top-level comment summarizes what has been done and contains link to addressed issue(s)
PR and issue(s) have suitable labels
Issue is set to In Progress and assigned to you or there is no issue (might happen for very small PRs)
You followed all coding conventions
You have added the issue implemented by your PR in CHANGELOG.adoc unless issue is labeled
with internal

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

…ess. (devonfw#1542) Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Removed duplicate entry for issue devonfw#1549 from changelog.

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

Fixes devonfw#1581 - Extracted findIdeHome() as protected method in AbstractIdeContext returning Map.Entry<Path, String> - Made isIdeHome() protected to allow access in test contexts - Overridden findIdeHome() in AbstractIdeTestContext to enforce test boundaries - Added findTestProjectRoot() to locate test resource boundaries via src/test/resources/ide-projects marker - Set ide.test.root.boundary system property to prevent upward traversal beyond test scope - Validated detected IDE home stays within test boundaries with clear error messages - All 80 tests pass successfully with no failures or errors

…vonfw#1583)

…maybeec/IDEasy into maybeec-feature/1581-test-isolation-fix

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com> Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

…w#1557) Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

…1810) Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

…evonfw#1775-validate-cve-reportings

…ucts, added tests, updated documentation

Co-authored-by: MarvMa <marvin.meitzner@gmail.com> Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

…f tools

…com:MarvMa/IDEasy into bugfix/devonfw#1775-validate-cve-reportings

…1775-validate-cve-reportings

…com:MarvMa/IDEasy into bugfix/devonfw#1775-validate-cve-reportings

-validate-cve-reportings

…evonfw#1775-validate-cve-reportings

jan-vcapgemini and others added 30 commits October 22, 2025 00:22

devonfw#1536: Disable uninstall for corepack and npm (devonfw#1541)

1cb23b2

devonfw#1534: Run migration first (devonfw#1540)

89c6c94

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1535: Fixed blocked env command (devonfw#1538)

09d7ac2

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1514: Fixed npm prefix not set (devonfw#1539)

5da1a41

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#858: Fixed kotlincnative naming (devonfw#1544)

82b512e

set release version to 2025.10.001

2425d43

set next version to 2025.10.002-SNAPSHOT

b10cfba

devonfw#1545: Fixed Yarn installation (devonfw#1546)

1db9615

devonfw#1526: correct parameter name and javadoc for FileAccess.compr…

a09cb4f

…ess. (devonfw#1542) Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1475: Fix isOnline check for Wiremock tests. (devonfw#1532)

9f9a7c9

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

devonfw#1549: Adjusted download exception type (devonfw#1550)

202caa0

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1492: Add Spring-Boot-CLI Commandlet (devonfw#1496)

71621da

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

set release version to 2025.10.002

c48a42a

set next version to 2025.10.003-SNAPSHOT

e543664

Update Maven revision version to 2025.11.001-SNAPSHOT

65065d2

devonfw#1555: Add npm_config_prefix env variable to Npm (devonfw#1556)

fc7cbb3

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Clean up changelog by removing duplicate entry

b7fc682

Removed duplicate entry for issue devonfw#1549 from changelog.

devonfw#1553: speed up environment commandlet (devonfw#1554)

1d75209

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

devonfw#1169: Fix Windows junction creation over broken junctions (de…

1525667

…vonfw#1583)

Merge branch 'feature/1581-test-isolation-fix' of https://github.com/…

0c544ad

…maybeec/IDEasy into maybeec-feature/1581-test-isolation-fix

devonfw#1581: constructive review

99c9a31

devonfw#1169: devonfw#1583: fixed test on Windows

b2dc11d

devonfw#1510: Add icd command hint to help output (devonfw#1574)

518726e

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

devonfw#1294: Refactor getMavenConfigurationFolder (devonfw#1573)

ccb99c2

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

devonfw#1560: enable trace logging in setup scripts (devonfw#1588)

865c180

devonfw#536: Fix duplicate completion candidates (devonfw#1578)

7c6610a

Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com> Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1338: Replace IllegalStateException with assert (devonfw#1572)

68dd4ae

Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

devonfw#1551: add NetworkStatus and improve status commandlet (devonf…

4221f55

…w#1557) Co-authored-by: jan-vcapgemini <59438728+jan-vcapgemini@users.noreply.github.com>

devonfw#1576: screenshots for gatekeeper

f8a90d5

AdemZarrouki and others added 2 commits April 13, 2026 12:50

devonfw#1799: Add support for file URL in GitUrl validation (devonfw#…

09f7e48

…1810) Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Fixed broken link to contributing guidelines

e9cf1b6

MarvMa moved this from 👀 In review to 🏗 In progress in IDEasy board Apr 14, 2026

MarvMa added 4 commits April 14, 2026 08:18

Merge branch 'main' of https://github.com/devonfw/IDEasy into bugfix/d…

2b35b94

…evonfw#1775-validate-cve-reportings

Merge branch 'main' of https://github.com/devonfw/IDEasy into bugfix/d…

c921a6f

…evonfw#1775-validate-cve-reportings

devonfw#1775: updated cpe logic

2ddf910

devonfw#1775: updated cpe logic

3a7c990

MarvMa marked this pull request as draft April 14, 2026 09:35

MarvMa and others added 22 commits April 15, 2026 09:33

devonfw#1775: updated tests and docs

e8199d2

devonfw#1775: updated tests and docs

0f398bc

devonfw#1775: updated implementation to add multiple vendors and prod…

df2f188

…ucts, added tests, updated documentation

devonfw#1775: updated implementation to add multiple vendors and prod…

c6211c2

…ucts, added tests, updated documentation

devonfw#906: Add feature configurable intellij vm args (devonfw#1820)

2bcde06

Co-authored-by: MarvMa <marvin.meitzner@gmail.com> Co-authored-by: Jörg Hohwiller <hohwille@users.noreply.github.com>

Merge branch 'main' into bugfix/devonfw#1775-validate-cve-reportings

75048e2

Merge branch 'main' into bugfix/devonfw#1775-validate-cve-reportings

07981c8

set release version to 2026.04.002

cfc7ccf

set next version to 2026.04.003-SNAPSHOT

1c9ecf7

devonfw#1775: updated cpe logic, added tests and changed cpe values o…

373421f

…f tools

devonfw#1775: updated cpe logic, added tests and changed cpe values o…

fd93189

…f tools

Merge branch 'bugfix/devonfw#1775-validate-cve-reportings' of github.…

1ec8497

…com:MarvMa/IDEasy into bugfix/devonfw#1775-validate-cve-reportings

Merge branch 'bugfix/devonfw#1775-validate-cve-reportings' of github.…

112f57c

…com:MarvMa/IDEasy into bugfix/devonfw#1775-validate-cve-reportings

Merge branch 'main' of github.com:devonfw/IDEasy into bugfix/devonfw#…

fc9486b

…1775-validate-cve-reportings

Merge branch 'main' of github.com:devonfw/IDEasy into bugfix/devonfw#…

df85be2

…1775-validate-cve-reportings

devonfw#1775: update implementation and update cpes for azure

5ed931f

devonfw#1775: update implementation and update cpes for azure

6035f83

Merge branch 'main' of github.com:devonfw/IDEasy

58afd99

Merge branch 'bugfix/devonfw#1775-validate-cve-reportings' of github.…

c4ffdc3

…com:MarvMa/IDEasy into bugfix/devonfw#1775-validate-cve-reportings

Merge branch 'main' of github.com:MarvMa/IDEasy into bugfix/devonfw#1775

a85520d

-validate-cve-reportings

devonfw#1775: update changelog

ea79798

Merge branch 'main' of https://github.com/devonfw/IDEasy into bugfix/d…

f3c5262

…evonfw#1775-validate-cve-reportings

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

#1775: validate and update CPE vendor and product for all tools#1796

#1775: validate and update CPE vendor and product for all tools#1796
MarvMa wants to merge 1217 commits intodevonfw:mainfrom
MarvMa:bugfix/#1775-validate-cve-reportings

MarvMa commented Apr 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

Conversation

MarvMa commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

This PR fixes #1775

Implemented changes:

Checklist for this PR

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

MarvMa commented Apr 2, 2026 •

edited

Loading