William Murphy 7ff37a0310 feat: filter out packages owned by OS packages (#1387) ... For example, if the rpm "python3-rpm" is installed, it brings a python package called "rpm" with it, which is just python bindings to RPM. But this python package is part of "python3-rpm", and should not be matched against directly. Only apply this deduplication strategy on distros with a comprehensive enough vulnerability feed that we don't expect false negatives from it. Signed-off-by: Will Murphy <will.murphy@anchore.com>		2023-08-18 15:43:42 -04:00
..
cli	fix: vulnerabilities should be printed when --fail-on fails (#1395)	2023-07-19 16:36:20 -04:00
install	fix: update architecture release for to ppc64le (#1021)	2022-11-29 17:44:59 -05:00
integration	feat: filter out packages owned by OS packages (#1387)	2023-08-18 15:43:42 -04:00
quality	chore: bump to syft v0.87.1 in quality gate (#1442)	2023-08-18 06:10:22 -04:00
grype-test-config.yaml	implement v5 db schema to support improved matching between rpm appstream modules (#944)	2022-10-18 00:34:47 +01:00
ignore-att-signature.yaml	chore: prune cosign dependency for grype builds (#1100)	2023-01-31 11:42:40 -05:00
validate-grype-db-schema.py	Port grype-db to grype (#587)	2022-01-12 10:03:22 -05:00