Add support in Apache Tomcat to collect commits #2129

Activity

1. meedoomostafa commented on Feb 3, 2026

   

   meedoomostafa

   on Feb 3, 2026

   More actions

   Hi @TG1999, I am interested in working on this issue. I plan to implement a new importer for Apache Tomcat by scraping their security pages using BeautifulSoup to map CVEs to their fix revisions. Could you please assign this to me ?
2. meedoomostafa commented on Feb 5, 2026

   

   meedoomostafa

   on Feb 5, 2026

   More actions

   Hi @TG1999,

   I have taken the time to deeply analyze the existing codebase and have implemented the enhancements for the ApacheTomcatImporter.

   Here is a summary of the changes:

   • Enhanced Commit Collection: The importer now captures commit URLs (GitHub, SVN, GitBox) from the entire advisory text, improving coverage.
   • Duplicate Prevention: Refined the parser logic to strictly target CVE headers, preventing false duplicates from descriptive text.
   • Verification: Validated with existing tests and regenerated test data to reflect the newly discovered commits.

   I am ready to submit a PR.
3. Tarun-goswamii

   added 2 commits that reference this issue on Feb 15, 2026

   Enhance Apache Tomcat importer to collect commit information

   ...

   This issue will close once commit 5c04433 is merged into the 'main' branch.

   5c04433

   Enhance Apache Tomcat importer to collect commit information

   ...

   This issue will close once commit 8781f30 is merged into the 'main' branch.

   8781f30
4. ziadhany

   self-assigned this

   on Feb 20, 2026