fix(fetcher/cwe): support all v4 series (#118)

fetcher/cwe/cwe.go

@@ -5,6 +5,7 @@ import (
 	"bytes"
 	"encoding/xml"
 	"fmt"
+	"strings"
 
 	"github.com/inconshreveable/log15"
 	"golang.org/x/xerrors"
@@ -37,7 +38,8 @@ func parse(res []byte) (map[string][]string, error) {
 
 	cweIDtoCapecIDs := map[string][]string{}
 	for _, file := range reader.File {
-		if file.Name != "cwec_v4.6.xml" {
+		if !strings.HasPrefix(file.Name, "cwec_v4") {
+			log15.Warn("Skip CWE parsing since only CWE v4 is supported", "file", file.Name)
 			continue
 		}
 

fetcher/cwe/cwe_test.go

@@ -14,11 +14,21 @@ func TestParse(t *testing.T) {
 		expected map[string][]string
 	}{
 		{
-			in: "testdata/cwec.xml.zip",
+			in: "testdata/v4.6/cwec.xml.zip",
 			expected: map[string][]string{
 				"CWE-1021": {"CAPEC-103", "CAPEC-181", "CAPEC-222", "CAPEC-504", "CAPEC-506", "CAPEC-654"},
 			},
 		},
+		{
+			in: "testdata/v4.14/cwec_latest.xml.zip",
+			expected: map[string][]string{
+				"CWE-1021": {"CAPEC-103", "CAPEC-181", "CAPEC-222", "CAPEC-504", "CAPEC-506", "CAPEC-587", "CAPEC-654"},
+			},
+		},
+		{
+			in:       "testdata/v5.0/cwec_latest.xml.zip",
+			expected: map[string][]string{},
+		},
 	}
 
 	for i, tt := range tests {