Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Add new server-side vulnerability report #978

Merged
merged 3 commits into from
Dec 13, 2023

Conversation

czunker
Copy link
Contributor

@czunker czunker commented Dec 4, 2023

cnspec fetches the vulnerability report from upstream and displays the list of vulnerable packages from this report.

The affected commands are scan and vuln.

apps/cnspec/cmd/vuln.go Outdated Show resolved Hide resolved
@czunker czunker force-pushed the christian/vuln_server_side branch from 0a6b366 to 2da4ed9 Compare December 4, 2023 12:37
@czunker
Copy link
Contributor Author

czunker commented Dec 4, 2023

This requires mondoohq/cnquery#2654 to work

@czunker czunker force-pushed the christian/vuln_server_side branch from 2da4ed9 to c62672f Compare December 5, 2023 10:39
@czunker czunker requested a review from imilchev December 5, 2023 12:18
@czunker czunker force-pushed the christian/vuln_server_side branch from c62672f to 27eb73d Compare December 6, 2023 13:15
Copy link
Member

@imilchev imilchev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there seem to be a lot of errors here

@czunker
Copy link
Contributor Author

czunker commented Dec 11, 2023

there seem to be a lot of errors here

Yes, this will only work, after mondoohq/cnquery#2654 is merged and this PR is updated to latest cnquery and go-mondoo.

@czunker czunker force-pushed the christian/vuln_server_side branch 2 times, most recently from c7ae1b2 to 0b1088c Compare December 11, 2023 13:46
@czunker czunker requested a review from imilchev December 11, 2023 17:41
Copy link
Member

@imilchev imilchev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

cnspec fetches the vulnerability report from upstream and displays the list of vulnerable packages from this report.

The affected commands are scan and vuln.

Also:
Fixes #977

Signed-off-by: Christian Zunker <[email protected]>
Signed-off-by: Christian Zunker <[email protected]>
Signed-off-by: Christian Zunker <[email protected]>
@czunker czunker force-pushed the christian/vuln_server_side branch from 5d97669 to 377dffc Compare December 13, 2023 13:14
@czunker czunker merged commit c3f93a2 into main Dec 13, 2023
9 checks passed
@czunker czunker deleted the christian/vuln_server_side branch December 13, 2023 13:36
@github-actions github-actions bot locked and limited conversation to collaborators Dec 13, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants