From 7ffbca3b3548b1ba7f764a3e4d5abe502c313160 Mon Sep 17 00:00:00 2001 From: etsien Date: Fri, 17 Jul 2026 00:13:53 -0400 Subject: [PATCH 1/2] add null guards to intel collection to catch mismatched ecosystem early --- src/vuln_analysis/utils/output_formatter.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/vuln_analysis/utils/output_formatter.py b/src/vuln_analysis/utils/output_formatter.py index 612d233a4..f0cf1d995 100644 --- a/src/vuln_analysis/utils/output_formatter.py +++ b/src/vuln_analysis/utils/output_formatter.py @@ -130,6 +130,9 @@ def _add_cve_intel(markdown_content, model_dict: ExploitIqOutput): None This function modifies `markdown_content` in place. """ + if model_dict.info.intel is None: + return + for intel_obj in model_dict.info.intel: cve_id = intel_obj.vuln_id cve_description = _normalize_content(_get_cve_description(intel_obj)) @@ -501,6 +504,9 @@ def _add_references(markdown_content, model_dict: ExploitIqOutput): None This function modifies `markdown_content` in place. """ + if model_dict.info.intel is None: + return + for intel_obj in model_dict.info.intel: cve_id = intel_obj.vuln_id markdown_content[cve_id].append( From 6b4f6c9294c35829ed59544f8a7569ad33c45acd Mon Sep 17 00:00:00 2001 From: etsien Date: Sun, 19 Jul 2026 06:18:36 -0400 Subject: [PATCH 2/2] add nullcheck to protect against similar issue if enable_mlops=True --- src/vuln_analysis/functions/cve_http_output.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/vuln_analysis/functions/cve_http_output.py b/src/vuln_analysis/functions/cve_http_output.py index 3f9c30e9e..a446624ac 100644 --- a/src/vuln_analysis/functions/cve_http_output.py +++ b/src/vuln_analysis/functions/cve_http_output.py @@ -232,7 +232,7 @@ def _extract_job_data(message: ExploitIqOutput) -> Job: component = message.input.image.name component_version = message.input.image.tag env_vars = get_filtered_env_vars() - intel = message.info.intel[0].model_dump_json(by_alias=True) + intel = message.info.intel[0].model_dump_json(by_alias=True) if message.info.intel else "" intel_b64 = encode_in_base64(intel) agent_config_b64 = encode_in_base64(agent_config.model_dump_json()) message_output = message.output.model_dump()