{% extends "layout.html" %}
{% block title %}Security {% endblock %}
{% block inner_content %}
{% from 'macros.html' import vulnerability_list %}

<div class="card mb-3">
  <div class="card-header">
    <h4 class="card-title">Security</h4>
    <h6 class="card-subtitle mb-2 text-muted">{{ vulnerable|length }} packages with known potential vulnerabilities</h6>
  </div>
  <div class="card-body overflow-auto">

    <p class="text-muted">{{ known|length }} out of {{ sources|length }}
    packages contain enough metadata for vulnerability reporting. For more
    information see <a href="https://www.msys2.org/dev/vulnerabilities">the
    vulnerability reporting documentation</a>.</p>

    <form action="{{ url_for('security') }}" method="get">
        <div class="form-check mb-2">
            <input class="form-check-input" type="checkbox" name="fix_only" {{ "checked" if fix_only else ""}} id="show-fix-only" onchange="this.form.submit()">
            <label class="form-check-label" for="show-fix-only">
                Show only packages for which a fix is potentially available
            </label>
        </div>
     </form>

    <table class="table table-hover table-sm" style="table-layout: fixed; width:100%;">
      <colgroup>
          <col style="width: 40%">
          <col style="width: 15%">
          <col style="width: 15%">
          <col style="width: 30%">
      </colgroup>
      <thead>
        <tr>
          <th>Base Package</th>
          <th>Version</th>
          <th>Upstream Version</th>
          <th>Vulnerabilities</th>
        </tr>
      </thead>
      <tbody>
      {% for s in vulnerable|sort(attribute='worst_active_vulnerability.severity.sort_key', reverse = True) %}
        <tr>
          <td><a href="{{ url_for('base', base_name=s.name) }}">{{ s.name }}</a></td>
          <td class="text-version">{{ s.version }}{% if s.version != s.git_version %} <span class="text-muted small align-text-bottom ps-1">({{ s.git_version }} in git)</span>{% endif %}</td>
          <td class="text-version">{{ s.upstream_version if s.is_outdated_in_git else '' }}</td>
          <td>
            {{ vulnerability_list(s) }}
          </td>
         </tr>
      {% endfor %}
      </tbody>
    </table>

    <h6>{{ unknown|length }} packages are missing metadata for vulnerability reporting:</h6>
    {% for s in unknown %}
        <a href="{{ url_for('base', base_name=s.name) }}">{{ s.realname }}</a>
        {{ ", " if not loop.last else '' }}
    {% endfor %}

  </div>
</div>

{% endblock %}