Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

feat: disable CPE-based matching by default for javascript (#1180)

Browse source 
* feat: disable CPE-based matching by default for javascript

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* chore: bump vuln match label dataset

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

---------

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
This commit is contained in:
Weston Steimel 2023-03-14 16:34:41 +00:00 committed by GitHub
parent 6da09d4fda
commit 52f724f785
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
internal/config/match.go
View file

@ -23,7 +23,7 @@ func (cfg matchConfig) loadDefaultValues(v *viper.Viper) {
v.SetDefault("match.java.using-cpes", true)
v.SetDefault("match.dotnet.using-cpes", true)
v.SetDefault("match.golang.using-cpes", true)
v.SetDefault("match.javascript.using-cpes", true)
v.SetDefault("match.javascript.using-cpes", false)
v.SetDefault("match.python.using-cpes", true)
v.SetDefault("match.ruby.using-cpes", true)
v.SetDefault("match.stock.using-cpes", true)

2
test/quality/vulnerability-match-labels

@ -1 +1 @@
Subproject commit 7ec8bd3a64d0a6cc79f33ef01797abd66c9cf43e
Subproject commit f3c11de428654fae039b808a723f830f412d098e