grype/test/grype-test-config.yaml at 3748e8e20cb593a23ab0a80192e0a99c6e221b5c - Mirrors/grype - CherryKitten

Mirrors/grype

mirror of https://github.com/anchore/grype synced 2024-11-14 00:07:08 +00:00

Weston Steimel 4cda526992

implement v5 db schema to support improved matching between rpm appstream modules (#944 )

Adds support for a `package_qualifiers` column to allow evaluating package matches to vulnerabilities based on more than just version constraints. Currently adds an rpm-modularity qualifier in order to support matching to correct app stream module in order to reduce false positives within rpm-based distro ecosystems. In order to prevent an increase in false positive matches for previous versions of grype using the v4 schema, this change (along with the vulnerability source driver parser updates) requires bumping the schema to v5.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Alex Goodman <alex.goodman@anchore.com>

2022-10-18 00:34:47 +01:00

1 line

28 B

YAML

Raw Blame History

check-for-app-update: false