Metadata Bindings

config/example.config.py

@@ -90,3 +90,9 @@
 # Whether to anonymize the site (for review).
 ANONYMOUS = False
 ANONYMOUS_GIT = ""
+
+# List of URLs to fetch additional metadata binding files from.
+BINDING_URLS = []
+
+# Secret key to validate jwt tokens of downloaded binding files with.
+BINDINGS_PUBLIC_KEY = ""

pyproject.toml

@@ -74,6 +74,7 @@
     "click",
     "requests",
     "feedgen",
+    "pyjwt",
   ]
 
 [project.optional-dependencies]

sec_certs_page/cc/views.py

@@ -299,6 +299,10 @@ def entry(hashid):
                 cpes = list(map(load, mongo.db.cpe.find({"_id": {"$in": list(doc["heuristics"]["cpe_matches"])}})))
             else:
                 cpes = []
+        with sentry_sdk.start_span(op="mongo", description="Find metadata bindings"):
+            additional_metadata = mongo.db.metadata_bindings.find_one({"cert_id" : doc["cert_id"]})
+            if not additional_metadata:
+                additional_metadata = []
         with sentry_sdk.start_span(op="files", description="Find local files"):
             local_files = entry_download_files(hashid, current_app.config["DATASET_PATH_CC_DIR"])
         with sentry_sdk.start_span(op="network", description="Find network"):
@@ -317,6 +321,7 @@ def entry(hashid):
             local_files=local_files,
             json=StorageFormat(raw_doc).to_json_mapping(),
             network=cert_network,
+            additional_metadata=additional_metadata,
         )
     else:
         return abort(404)