74efdf6b51
*: update roadmap
...
Fixes #626 .
6 years ago
8cf7ad454c
Merge pull request #627 from haydenhughes/master
...
Add build-base to docker image
6 years ago
5d1c30218e
Merge pull request #624 from jzelinskie/probot
...
.github: add stale and issue template enforcement
6 years ago
9b1f205833
.github: add stale and issue template enforcement
...
This change will allow probot to enforce our GitHub policies.
6 years ago
0ca9431235
Merge pull request #621 from jzelinskie/gitutil
...
pkg/gitutil: init
6 years ago
d3facfd7cd
Add build-base to docker image
6 years ago
44ae4bc959
Merge pull request #610 from MackJM/wip/master_nvd_httputil
...
Using httputil for NVD
6 years ago
c2d887f9e9
pkg/gitutil: init
...
This refactors the code we're using to manage temporary git repositories
into a utility package.
6 years ago
d0a3fe9206
Merge pull request #499 from yebinama/rhel_CVEID
...
vulnsrc_rhel: one vulnerability by CVE
6 years ago
c4ffa0c370
vulnsrc_rhel: cve impact
...
use the specific CVE's impact field instead of the RHSA's one
6 years ago
a90db713a2
vulnsrc_rhel: add test
...
Add test for multiple CVE
6 years ago
8b3338ef56
vulnsrc_rhel: minor changes
...
delete a useless line
6 years ago
4e4e98f328
vulnsrc_rhel: minor changes
...
Code reorganisation
6 years ago
ac86a36740
vulnsrc_rhel: rhsa_ID by default
...
If no CVE is present, create a vulnerability with rhsa ID
6 years ago
4ab98cfe54
vulnsrc_rhel: one vulnerability by CVE
...
Get one vulnerability by CVE_ID for RHEL instead of one by RHSA_ID so we can have NVD metadata added to the vulnerabilities.
Fixes #495
6 years ago
f98ff58afd
Merge pull request #619 from KeyboardNerd/sidac/rm_layer
...
database: Remove LayerWithContent from interface
6 years ago
e160616723
database: Use LayerWithContent as Layer
6 years ago
30848d9eb7
Fixed extra newline
6 years ago
56b4f23ae2
Move downloadFeed out to a seperate function
6 years ago
f34f94320a
Embed nvd's downloading and storing of meta data into a function to help with resource management
6 years ago
3959f416fa
Fix up error and changing close to defer close
6 years ago
49cbdd7a7c
Using httputil for NVD
...
nvd was missed when moving to httputil, this fixes it
6 years ago
089a4e0f0a
Merge pull request #617 from jzelinskie/grpc-refactor
...
Introduce pkg/grpcutil
6 years ago
1ec2759550
pkg/grpcutil: init
...
This change refactors gRPC code used within the v3 API package into
generic code that can be used for managing gRPC and gRPC Gateway.
6 years ago
ff9303905b
database: changed Notification interface name
6 years ago
6c69377343
Merge pull request #614 from KeyboardNerd/sidac/simplify
...
Replace Ancestry with AncestryWithContent struct in database models
6 years ago
dc6be5d1b0
api: remove handleShutdown func
...
This function was used for handling errors in the graceful library and
was never necessary for the v3 API.
6 years ago
5d725e67b0
Replace Ancestry with AncestryWithContent struct in database models
...
As one of the steps to simplifies the codebase, the AncestryWithContent
struct is renamed to Ancestry, and Ancestry is removed. It will cause
the PostAncestry request to be slower.
6 years ago
e5c2e378a2
Merge pull request #613 from jzelinskie/pkg-pagination
...
Introduce pkg/pagination
6 years ago
0565938956
pkg/pagination: add token type
...
This change pulls as much pagination logic out of the database
implementation as possible. Database implementations should now be able
to marshal whatever state they need into opaque tokens with the
utilities in the pagination package.
6 years ago
d193b46449
pkg/pagination: init
...
This change refactors a lot of the code dealing with pagination so that
fernet implementation details do not leak.
- Deletes database/pgsql/token
- Introduces a pagination package
- Renames idPageNumber to Page and add a constructor and method.
6 years ago
b20482e0ae
cmd/clair: document constants
6 years ago
fffb67f137
Merge pull request #611 from jzelinskie/drop-graceful
...
Remove dependency on graceful
6 years ago
55ecf1e58a
vendor: regenerate after removing graceful
6 years ago
30644fcc01
api: remove dependency on graceful
...
This library has no longer been needed since Go 1.8.
6 years ago
2bbbad393b
Merge pull request #605 from KeyboardNerd/sidchen/feature
...
Implement Ancestry Layer-wise feature API
6 years ago
2827b9342b
Update Database and Worker implementation for layer-wise feature
...
Feature extraction algorithm is changed to associate features with
ancestry layer. Database is updated to keep the relationship.
6 years ago
06b257cc97
Merge pull request #606 from MackJM/wip/master_httputil
...
Adding httputil and version packages to master
6 years ago
4fd86fd518
Merge pull request #607 from jzelinskie/gofmt
...
enforce gofmt in travis
6 years ago
ce15f73501
*: gofmt -s
6 years ago
52ecf35ca6
travis: fail if not gofmt -s
6 years ago
9df4f5bd70
Adding httputil and version packages
...
- Debian/RHEL/Oracle vulnsrc now use httputil to download files
- httputil sets the User-Agent to the requests as Clair/<version> (https://github.com/coreos/clair/ )
- httputil holds Status2xx() which returns if the response is a http success (2xx)
- GetClientAddr moved from api/httputil to pkg/httputil
- the version packge holds a Version string which is set at build time from the git tag and sha
- the .git directory was removed from .dockerignore so that we can use the git tag to set the version
6 years ago
4b64151330
Update gRPC server implementation
6 years ago
6a44052e31
Update Clair V3 API to provide layer-wise feature
6 years ago
9f2cc4e533
Merge pull request #604 from jzelinskie/nvd-urls
...
vulnmdsrc: update NVD URLs
6 years ago
ce6b00887b
vulnmdsrc: update NVD URLs
...
This connects us via a domain hosted on AWS which should provide
performance benefits for users running Clair on AWS and alleviate load
from the NIST campus network.
Fixes #575 .
6 years ago
dfc3023372
Merge pull request #601 from KeyboardNerd/sidchen/status
...
Add Status endpoint with Clair configuration
6 years ago
d28f3214ce
Add Status endpoint with Clair configuration
...
Implement a status endpoint providing the current lister/detector in
the current instance of Clair.
6 years ago
7f9c0b1b07
Merge pull request #594 from reasonerjt/fix-alpine-url
...
Quickfix to the URL for fetching alpine's vuln data.
6 years ago
9e4a347ecd
Quickfix to the URL for fetching alpine's vuln data.
...
Fixes #593
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
6 years ago
Jimmy Zelinskie