grype/test/grype-test-config.yaml at cb188974922a006c3a536f448d0072c541fee887 - Mirrors/grype - CherryKitten

Mirrors/grype

mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00

Weston Steimel 25762b7e3b

feat: disable CPE-based matching for GHSA ecosystems by default (#1412 )

* feat: disable CPE-based matching for GHSA ecosystems by default

Disables CPE-based matching for ecosystems which are covered by GitHub
Security Advisories.  Also adds a separate rust matcher and related
configuration to allow configuring CPE-based matching off for it while
still leaving it on for the stock matcher.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* chore: use --by-cve with quality gate comparison

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* chore: add rust auditable binary match integration test

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

---------

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

2023-10-12 09:07:33 -04:00

2 lines

29 B

YAML

Raw Blame History

	`check-for-app-update: false`