Merge pull request #1445 from poju3185/fix-vulntotal-import

Update GitHub GraphQL import in vulntotal datasources

Author: keshav-space

docs/source/conf.py

@@ -34,6 +34,7 @@
     "https://api.github.com/graphql",  # Requires auth
     "https://anongit.gentoo.org/git/data/glsa.git",  # Git only link
     "https://www.softwaretestinghelp.com/how-to-write-good-bug-report/",  # Cloudflare protection
+    "https://www.openssl.org/news/vulnerabilities.xml",  # OpenSSL legacy advisory URL, not longer available
 ]
 
 # Add any Sphinx extension module names here, as strings. They can be

vulntotal/datasources/github.py

@@ -11,9 +11,9 @@
 from typing import Iterable
 
 from dotenv import load_dotenv
+from fetchcode.package_versions import github_response
 from packageurl import PackageURL
 
-from vulnerabilities import utils
 from vulntotal.validator import DataSource
 from vulntotal.validator import InvalidCVEError
 from vulntotal.validator import VendorData
@@ -35,7 +35,7 @@ def fetch_github(self, graphql_query):
                 GH_TOKEN="your-github-token"
         """
         load_dotenv()
-        return utils.fetch_github_graphql_query(graphql_query)
+        return github_response(graphql_query)
 
     def datasource_advisory(self, purl) -> Iterable[VendorData]:
         end_cursor = ""