Import VulnDB into the Serpico Template Database

import_vulndb_serpico.rb

# An example script to import VulnDB data into the Serpico Template database
# => Must be run from the Serpico root directory
#
# Serpico: https://github.com/MooseDojo/Serpico
# VulnDB: https://github.com/vulndb/data
# Author: https://github.com/BuffaloWill

require './model/master.rb'
require 'json'

# Directory containing vulndb JSON files
vulndb_dir = "[ADD ME PLS]" # e.g. /Users/username/data/db/

# Simple helper method rather than hand cleaning every string
def c(value)
	c_value = value.gsub("\n\n","<paragraph></paragraph>")
	c_value = c_value.gsub("`","'")
	return c_value
end

# Iterate the VulnDB database
Dir.entries(vulndb_dir).each do |json_file|
	next if json_file == "." or json_file == ".."

	# Read in the JSON file and store as json obj
	file = File.read(vulndb_dir+json_file)
	json_data = JSON.parse(file)

	#### Change this portion if the VulnDB Schema changes
	finding = {}
	puts "|+| Importing #{json_data["title"]}"
	finding["title"] = c(json_data["title"])

	finding["overview"] = "<paragraph>"
	finding["overview"] += c(json_data["description"].join(" "))
	finding["overview"] += "</paragraph>"

	if json_data["fix"]["guidance"].kind_of?(Array)
		finding["remediation"] = "<paragraph>"
		finding["remediation"] += c(json_data["fix"]["guidance"].join(" "))
		finding["remediation"] += "</paragraph>"
	else
		finding["remediation"] = c(json_data["fix"]["guidance"])
	end

	finding["references"] = "<paragraph>VulnDB: https://github.com/vulndb/data</paragraph>"
	if json_data["references"] != nil
		json_data["references"].each do |ref|
			finding["references"] += "<paragraph>"+c(ref["url"])+"</paragraph>"
		end
	end

	finding["type"] = "Imported"
	finding["approved"] = true

	finding["risk"] = 1 if json_data["severity"] == "informational"
	finding["risk"] = 2 if json_data["severity"] == "low"
	finding["risk"] = 3 if json_data["severity"] == "medium"
	finding["risk"] = 4 if json_data["severity"] == "high"
	
	# TODO: add a true DREAD score calculator
	finding["damage"] = 1
	finding["reproducability"] = 1
	finding["exploitability"] = 1
	finding["affected_users"] = 1
	finding["discoverability"] = 1
	finding["dread_total"] = 5
	####

	# write the database
    finding_db = TemplateFindings.create(finding)
    finding_db.save
end

I am facing the same issue as @noahlevinasdf

|+| Importing HttpOnly cookie
scripts/import_vulndb.rb:35:in block in

': undefined method join' for {"$ref"=>"#/files/description/22"}:Hash (NoMethodError)
Did you mean? JSON
from scripts/import_vulndb.rb:22:in each' from scripts/import_vulndb.rb:22:in

Can you please help with this issue ?