git: d7342606db - main - [phb][Uses]: The CPE dictionary is in JSON now
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 18 Jun 2026 09:45:17 UTC
The branch main has been updated by des:
URL: https://cgit.FreeBSD.org/doc/commit/?id=d7342606db1bf61c71aa6564a8039fe5fb8b33e7
commit d7342606db1bf61c71aa6564a8039fe5fb8b33e7
Author: Dag-Erling Smørgrav <des@FreeBSD.org>
AuthorDate: 2026-06-18 09:44:16 +0000
Commit: Dag-Erling Smørgrav <des@FreeBSD.org>
CommitDate: 2026-06-18 09:44:16 +0000
[phb][Uses]: The CPE dictionary is in JSON now
---
documentation/content/en/books/porters-handbook/uses/_index.adoc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/documentation/content/en/books/porters-handbook/uses/_index.adoc b/documentation/content/en/books/porters-handbook/uses/_index.adoc
index 3ef4415f44..1f834f0580 100644
--- a/documentation/content/en/books/porters-handbook/uses/_index.adoc
+++ b/documentation/content/en/books/porters-handbook/uses/_index.adoc
@@ -522,7 +522,7 @@ See the https://scap.nist.gov/specifications/cpe/[CPE specification] for details
To add CPE information to a port, follow these steps:
[.procedure]
-. Search for the official CPE entry for the software product either by using the NVD's https://web.nvd.nist.gov/view/cpe/search[CPE search engine] or in the https://nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml.gz[official CPE dictionary] (warning, very large XML file). _Do not ever make up CPE data._
+. Search for the official CPE entry for the software product either by using the NVD's https://web.nvd.nist.gov/view/cpe/search[CPE search engine] or in the https://nvd.nist.gov/feeds/json/cpe/2.0/nvdcpe-2.0.tar.gz[official CPE dictionary] (warning, very large JSON file). _Do not ever make up CPE data._
. Add `cpe` to `USES` and compare the result of `make -V CPE_STR` to the CPE dictionary entry. Continue one step at a time until `make -V CPE_STR` is correct.
. If the product name (second field, defaults to `PORTNAME`) is incorrect, define `CPE_PRODUCT`.
. If the vendor name (first field, defaults to `CPE_PRODUCT`) is incorrect, define `CPE_VENDOR`.