fix: epss and kev file nil pointer bug

Author: BacchusJackson

CHANGELOG.md

@@ -7,10 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [UNRELEASED]
 
+## [0.7.4] - 2024-06-18
+
 ### Fixed
 
 - Missing `slog.Error` for KEV validations
 - Use base EPSS url instead of a specific date to get the latest data
+- Use a *os.File for kev and epss validation to simplify CLI runtime logic
 
 ## [0.7.0] - 2024-05-17
 

cmd/validate.go

@@ -52,14 +52,13 @@ var validateCmd = &cobra.Command{
 		return nil
 	},
 	RunE: func(cmd *cobra.Command, args []string) error {
-
 		err := gatecheck.Validate(
 			RuntimeConfig.gatecheckConfig,
 			RuntimeConfig.targetFile,
 			args[0],
 			gatecheck.WithEPSSURL(RuntimeConfig.EPSSURL.Value().(string)),
 			gatecheck.WithKEVURL(RuntimeConfig.KEVURL.Value().(string)),
-			gatecheck.WithEPSSFile(RuntimeConfig.epssFile),
+			gatecheck.WithEPSSFile(RuntimeConfig.epssFile), // TODO: fix this
 			gatecheck.WithKEVFile(RuntimeConfig.kevFile),
 		)
 

pkg/gatecheck/download.go

@@ -3,6 +3,7 @@ package gatecheck
 import (
 	"io"
 	"net/http"
+	"os"
 
 	"github.com/gatecheckdev/gatecheck/pkg/epss"
 	"github.com/gatecheckdev/gatecheck/pkg/kev"
@@ -15,8 +16,8 @@ type fetchOptions struct {
 	kevClient *http.Client
 	kevURL    string
 
-	epssFile io.Reader
-	kevFile  io.Reader
+	epssFile *os.File
+	kevFile  *os.File
 }
 
 func defaultOptions() *fetchOptions {
@@ -56,15 +57,15 @@ func WithKEVURL(url string) optionFunc {
 	}
 }
 
-func WithEPSSFile(r io.Reader) optionFunc {
+func WithEPSSFile(epssFile *os.File) optionFunc {
 	return func(o *fetchOptions) {
-		o.epssFile = r
+		o.epssFile = epssFile
 	}
 }
 
-func WithKEVFile(r io.Reader) optionFunc {
+func WithKEVFile(kevFile *os.File) optionFunc {
 	return func(o *fetchOptions) {
-		o.kevFile = r
+		o.kevFile = kevFile
 	}
 }