arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
538 Commits 5 Branches 24 Tags 158 MiB
aa6a81c60c
Commit Graph

538 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jimmy Zelinskie
ea73aa153d pgsql: searchNotificationLayerIntroducingVulnerability order by layer ID 
This fixes a bug where the API was returning Notification pages ordered
by LDFV.ID instead of by Layer ID.
 2017-01-19 13:45:07 -05:00
Jimmy Zelinskie
1d6ef941a0 Merge pull request #302 from jzelinskie/rmimage 
README: rm images from repo
 2017-01-04 12:18:07 -05:00
Jimmy Zelinskie
67be72b97e README: rm images from repo 2017-01-03 22:22:41 -05:00
Jimmy Zelinskie
a35757cd99 Merge pull request #301 from jzelinskie/readme-git 
README: add git dependency
 2017-01-03 17:17:53 -05:00
Jimmy Zelinskie
ab33f8c4bd Merge pull request #298 from jzelinskie/versions 
Add registrable version formats
 2017-01-03 17:10:49 -05:00
Jimmy Zelinskie
627b98ef31 db/pgsql/feature: fix SQL error reporting 2017-01-03 17:06:08 -05:00
Jimmy Zelinskie
8d29bf860d versionfmt: convert to using constant over literal 2017-01-03 16:00:20 -05:00
Jimmy Zelinskie
ebd0170f5b api/v1: fix JSON struct tag misnomer 2017-01-03 15:59:51 -05:00
Jimmy Zelinskie
8df8170ba5 db/pgsql/migration: convert to pure SQL 2017-01-03 15:59:22 -05:00
Jimmy Zelinskie
a1bbd7dbf0 README: add git dependency 2017-01-03 13:25:15 -05:00
Jimmy Zelinskie
8bedd0a367 worker: ns detectors now support VersionFormat 
This also filters unknown namespaces from the generic lsb-release and
osrelease detectors.
 2017-01-03 13:15:46 -05:00
Jimmy Zelinskie
9e39a26f26 backfill version_format column 2017-01-03 13:15:14 -05:00
Jimmy Zelinskie
722ab3c6de Merge pull request #300 from miketheman/patch-1 
docs: Correct docker-compose command
 2017-01-03 11:59:19 -05:00
Mike Fiedler
107582c96e docs: Correct docker-compose command 
[ci skip]
 2017-01-02 15:21:36 +02:00
Jimmy Zelinskie
6864a8efea versionfmt: init rpm versionfmt 2016-12-30 12:51:25 -05:00
Jimmy Zelinskie
033709eaea add registerable version formats 
Since we only ever used dpkg, this change shims everything into using
dpkg.
 2016-12-30 12:51:24 -05:00
Jimmy Zelinskie
7106f1c524 Merge pull request #299 from alexei-led/master 
fix error when scanning folders for feteched update for Alpine vulnerabilities
 2016-12-30 12:48:29 -05:00
Alexei Ledenev
7ec9225bdc fix error scanning folders for feteched Alpine vulnerabilities 2016-12-30 15:36:09 +02:00
Jimmy Zelinskie
3897fb6706 Merge pull request #295 from jzelinskie/fixmigrationorder 
psql/migrations: fix ordering
 2016-12-25 19:31:49 -05:00
Jimmy Zelinskie
9338f28e82 psql/migrations: fix ordering 2016-12-25 19:25:57 -05:00
Jimmy Zelinskie
7d3d1861d0 Merge pull request #290 from Djelibeybi/oraclelinux-support 
Oracle Linux support
 2016-12-19 20:58:17 -05:00
Avi Miller
2643d22aaa Updated fetcher and tests to close the file handles and HTTP response. 
Signed-off-by: Avi Miller <avi.miller@oracle.com>
 2016-12-20 12:14:10 +11:00
Avi Miller
a3c2dae790 Updated README with Oracle Linux security information. 
Signed-off-by: Avi Miller <avi.miller@oracle.com>
 2016-12-20 11:48:37 +11:00
Avi Miller
9d885f680c Add Oracle Linux fetcher to grab and parse OVAL data. 
Signed-off-by: Avi Miller <avi.miller@oracle.com>
 2016-12-20 11:25:07 +11:00
Jimmy Zelinskie
9532c03f95 Merge pull request #288 from jzelinskie/200mb 
worker: clarify maxFileSize purpose
 2016-12-19 19:19:11 -05:00
Jimmy Zelinskie
de1f09e8b3 worker: clarify maxFileSize purpose 
Fixes #237.
 2016-12-19 19:02:13 -05:00
Avi Miller
5eb57fee37 Update osrelease and redhatrelease detectors to detect Oracle Linux as well. 2016-12-20 10:53:30 +11:00
Jimmy Zelinskie
8e1fe0d01f Merge pull request #289 from jzelinskie/revert-suse 
Revert OpenSUSE
 2016-12-19 18:43:04 -05:00
Jimmy Zelinskie
740262c055 Revert "Merge pull request #199 from openSUSE/feature/opensuse" 
This reverts commit 97347ec44d, reversing
changes made to 051564facd.
 2016-12-19 17:03:39 -05:00
Jimmy Zelinskie
7d0f29b28f Merge pull request #287 from jzelinskie/enginebump 
worker: bump engine version
 2016-12-19 15:42:23 -05:00
Jimmy Zelinskie
2cb23ced02 worker: bump engine version 
Now that we support OpenSUSE and Alpine Linux the engine version should
be increased.
 2016-12-19 15:35:25 -05:00
Jimmy Zelinskie
d62bddd6e3 Merge pull request #272 from jzelinskie/alpine 
[WIP] Alpine support via Alpine-SecDB
 2016-12-19 11:39:15 -05:00
Jimmy Zelinskie
f74cd35243 fetchers/alpine: add notes for untracked namespaces 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
3be8dfcf99 fetchers/alpine: auto detect namespaces 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
59e6c628dc alpine: refactor fetcher & git pull on update 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
9be305d19f alpine: truncate namespace to "vMAJOR.MINOR" 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
f8457b98e7 alpine: compile alpine into clair binary 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
3d90cac427 alpine: add support for v3.4 YAML schema 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
805f620b4b README: add alpine data sources 2016-12-19 11:32:46 -05:00
Jimmy Zelinskie
c1e0f618ca dockerfile: add git dependency 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
0cb8fc9455 updater/fetchers: add alpine secdb fetcher 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
fc908e65ba detectors/feature: add apk feature detector 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
e4b5930f77 detectors/feature: consistent naming and godoc 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
1d5a9ddd3c detectors/namespace: add alpine-release detector 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
0b2a9ab12b detectors/namespace: support pointers in tests 
This change adjusts some names of types being exported and adds some
documentation.
 2016-12-19 11:32:45 -05:00
Jimmy Zelinskie
5396396ff7 Merge pull request #282 from jzelinskie/layer-sort-id 
api/v1: indexed layers for notifications
 2016-12-06 19:37:49 -05:00
Jimmy Zelinskie
12c47e4066 docs: split http and json code blocks 2016-12-06 19:23:33 -05:00
Jimmy Zelinskie
d4522e9c6e api/v1: indexed layers for notifications 
This change deprecates the old LayersIntroducingVulnerability for a new
one that orders output and contains an Index. This index is not
guaranteed to be consistent across multiple notifications, despite the
current Postgres implementation using the primary key of Layer table.
 2016-12-06 19:23:33 -05:00
Quentin Machu
1fcae6abb8 Merge pull request #280 from coreos/add_idx_deleted_at 
pgsql/migrations: add index on Vulnerability_Notification.deleted_at
 2016-12-06 19:48:40 +01:00
Quentin Machu
83b5538c65 Merge pull request #281 from coreos/dis_hashjoins_introducing 
pgsql: Disable hashjoins to get introducing layers for notifications
 2016-12-06 19:48:33 +01:00