grype/test/grype-test-config.yaml at 0fd0c56d9ade3fe8dbc46587e9986118468f0c39 - Mirrors/grype - CherryKitten

Mirrors/grype

mirror of https://github.com/anchore/grype synced 2024-09-20 14:31:59 +00:00

Weston Steimel 4cda526992

implement v5 db schema to support improved matching between rpm appstream modules (#944 )

Adds support for a `package_qualifiers` column to allow evaluating package matches to vulnerabilities based on more than just version constraints. Currently adds an rpm-modularity qualifier in order to support matching to correct app stream module in order to reduce false positives within rpm-based distro ecosystems. In order to prevent an increase in false positive matches for previous versions of grype using the v4 schema, this change (along with the vulnerability source driver parser updates) requires bumping the schema to v5.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Alex Goodman <alex.goodman@anchore.com>

2022-10-18 00:34:47 +01:00

1 line

28 B

YAML

Raw Blame History

check-for-app-update: false