grype/test/grype-test-config.yaml at fbdab6e1ecefad6d61a0a2819d97c4ce17d3bf20 - Mirrors/grype - CherryKitten

Mirrors/grype

mirror of https://github.com/anchore/grype synced 2024-09-20 06:21:56 +00:00

Weston Steimel 25762b7e3b

feat: disable CPE-based matching for GHSA ecosystems by default (#1412 )

* feat: disable CPE-based matching for GHSA ecosystems by default

Disables CPE-based matching for ecosystems which are covered by GitHub
Security Advisories.  Also adds a separate rust matcher and related
configuration to allow configuring CPE-based matching off for it while
still leaving it on for the stock matcher.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* chore: use --by-cve with quality gate comparison

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* chore: add rust auditable binary match integration test

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

---------

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

2023-10-12 09:07:33 -04:00

2 lines

29 B

YAML

Raw Blame History

	`check-for-app-update: false`