fedcode-next: Extract fix commits from the commit logs in search for CVE-related commit messages #2000

Activity

1. pombredanne

   added this to 00-AboutCodePlanneron Oct 15, 2025
2. ziadhany commented on Feb 12, 2026

   

   ziadhany

   on Feb 12, 2026

   Last edited by pombredanne

   Member

   More actions

   This has been completed. We now have a new importer named "collect_fix_commits" that does the job. It has been merged with this PR:

   • Add support for parsing Git commit messages #1992

   We further fine tune the pipeline on the list of project listed below.

   See the collected commits attached for reference:
   vulnerabilities_packagecommitpatch.zip

   These are the repositories we use to fine tune the data collection:

   • Linux Kernel: https://github.com/torvalds/linux
   • BusyBox: https://github.com/mirror/busybox.git
   • Nginx: https://github.com/nginx/nginx.git
   • Apache Tomcat: https://github.com/apache/tomcat.git
   • MySQL Server: https://github.com/mysql/mysql-server.git
   • PostgreSQL: https://github.com/postgres/postgres.git
   • MongoDB: https://github.com/mongodb/mongo.git
   • Redis: https://github.com/redis/redis.git
   • SQLite: https://github.com/sqlite/sqlite.git
   • PHP: https://github.com/php/php-src.git
   • Python (CPython): https://github.com/python/cpython.git
   • Ruby: https://github.com/ruby/ruby.git
   • Go (Golang): https://github.com/golang/go.git
   • Node.js: https://github.com/nodejs/node.git
   • Rust: https://github.com/rust-lang/rust.git
   • OpenJDK (Java): https://github.com/openjdk/jdk.git
   • Swift: https://github.com/swiftlang/swift.git
   • Django: https://github.com/django/django.git
   • Rails: https://github.com/rails/rails.git
   • Laravel: https://github.com/laravel/framework.git
   • Spring Framework: https://github.com/spring-projects/spring-framework.git
   • React: https://github.com/facebook/react
   • Angular: https://github.com/angular/angular
   • WordPress: https://github.com/WordPress/WordPress.git
   • Docker (Moby): https://github.com/moby/moby.git
   • Kubernetes: https://github.com/kubernetes/kubernetes.git
   • QEMU: https://gitlab.com/qemu-project/qemu.git
   • Xen Project: https://github.com/xen-project/xen.git
   • VirtualBox: https://github.com/mirror/vbox.git
   • Containerd: https://github.com/containerd/containerd.git
   • Ansible: https://github.com/ansible/ansible.git
   • Terraform: https://github.com/hashicorp/terraform.git
   • Wireshark: https://gitlab.com/wireshark/wireshark.git
   • Tcpdump: https://github.com/the-tcpdump-group/tcpdump.git
   • Git: https://github.com/git/git.git
   • Jenkins: https://github.com/jenkinsci/jenkins.git
   • GitLab (Community Edition): https://gitlab.com/gitlab-org/gitlab-foss.git

   There is further work that will continue for this feature in:

   • Improve collection from fix commits from git logs #2319
3. ziadhany

   closed this as completedon Feb 12, 2026
4. github-project-automation

   moved this to Done in 00-AboutCodePlanneron Feb 12, 2026
5. TG1999

   assigned

   ziadhany

   on Apr 9, 2026
6. pombredanne

   moved this from Done to Under review in 00-AboutCodePlanneron May 28, 2026
7. pombredanne

   moved this from Reviewed to Validated in 00-AboutCodePlanneron Aug 7, 2026