Initial Builder

sql/schema.sql

@@ -1,9 +1,17 @@
--- CVE-Metadatenindex. Keine CPE-/Paket-Matching-Engine!
-CREATE TABLE cve (
-    cve_id TEXT PRIMARY KEY,
-    state TEXT NOT NULL,
-    date_updated TEXT,
-    affected BLOB NOT NULL, -- zlib-komprimierte JSON-CNA-affected-Liste
-    row_hash TEXT NOT NULL
-) WITHOUT ROWID;
-CREATE INDEX idx_cve_state ON cve(state);
+PRAGMA foreign_keys=ON;
+CREATE TABLE IF NOT EXISTS meta (key TEXT PRIMARY KEY,value TEXT NOT NULL);
+CREATE TABLE IF NOT EXISTS sources (name TEXT PRIMARY KEY, revision TEXT NOT NULL, indexed INTEGER NOT NULL DEFAULT 0, documents INTEGER NOT NULL DEFAULT 0);
+CREATE TABLE IF NOT EXISTS vulnerabilities (id TEXT PRIMARY KEY, published TEXT, modified TEXT, state TEXT, summary TEXT);
+CREATE TABLE IF NOT EXISTS aliases (alias TEXT NOT NULL, vulnerability_id TEXT NOT NULL REFERENCES vulnerabilities(id) ON DELETE CASCADE, PRIMARY KEY(alias,vulnerability_id));
+CREATE INDEX IF NOT EXISTS idx_aliases_vuln ON aliases(vulnerability_id);
+CREATE TABLE IF NOT EXISTS affected_packages (
+ id TEXT PRIMARY KEY, vulnerability_id TEXT NOT NULL REFERENCES vulnerabilities(id) ON DELETE CASCADE,
+ ecosystem TEXT, package_name TEXT, ranges_json TEXT NOT NULL, versions_json TEXT NOT NULL, source TEXT NOT NULL);
+CREATE INDEX IF NOT EXISTS idx_affected_vuln ON affected_packages(vulnerability_id);
+CREATE INDEX IF NOT EXISTS idx_affected_package ON affected_packages(ecosystem,package_name);
+CREATE TABLE IF NOT EXISTS cpe_matches (
+ id TEXT PRIMARY KEY, vulnerability_id TEXT NOT NULL REFERENCES vulnerabilities(id) ON DELETE CASCADE,
+ criteria TEXT, vulnerable INTEGER, version_start_including TEXT, version_start_excluding TEXT,
+ version_end_including TEXT, version_end_excluding TEXT, source TEXT NOT NULL);
+CREATE INDEX IF NOT EXISTS idx_cpe_vuln ON cpe_matches(vulnerability_id);
+-- Conditions expressed as AND, OR and negate are deliberately NOT converted into independent vulnerability assertions.