1
0
mirror of https://github.com/quay/quay.git synced 2026-01-27 18:42:52 +03:00

6 Commits

Author SHA1 Message Date
Ross Bryan
66fbe49ee2 secscan: implement basescore/cveid (PROJQUAY-6697) (#2684)
* secscan: implement basescore/cveid (PROJQUAY-6697)

Signed-off-by: Ross Bryan <robryan@redhat.com>

* docs: add docstrings to helper functions

Signed-off-by: Ross Bryan <robryan@redhat.com>

* secscan: refactor base_score builder loop

Signed-off-by: Ross Bryan <robryan@redhat.com>

* make cveIDs a unique, alpha sorted list

Signed-off-by: Ross Bryan <robryan@redhat.com>

---------

Signed-off-by: Ross Bryan <robryan@redhat.com>
2024-03-20 13:20:17 +01:00
Sunandadadi
162b79ec53 Quay: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)
Fixed source of CVE ratings and fixed failing tests
2021-10-20 11:19:41 -04:00
Sunandadadi
fa0e861849 Secscan: clair v4 enrichment (PROJQUAY-2102) (#840)
Updated descriptions as per CVSS v3.1 vector strings
2021-07-22 16:15:21 -05:00
Arunprasad Rajkumar
d575f39136 PROJQUAY-963: Add package and vulnerability related metadata into secscan response (#515)
* clairv4: Add package and vulnerability metadata into secscan response

* Update field name

* Add missing mapping

* Fix code format

* Piggyback Metadata field to expose updater, repository and distro details

* Fix format

* Use distro and repo details from vulnerability

* Trigger PR check

* fix: Add missing model mapping

* Add response with Metadata field

* Modify response according to new Metadata format
2021-03-19 15:43:50 -04:00
Alec Merdler
e003b8e8ed fix security scan column on tags view for Clair v2 (#324) 2020-04-07 14:40:58 -07:00
Alec Merdler
531b97c4f9 implement Clair v4 client and set up model splitting (#259) 2020-03-31 11:32:56 -07:00