Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: azurelinux considered as comprehensive distro #2197

Merged
merged 1 commit into from
Oct 17, 2024
Merged

fix: azurelinux considered as comprehensive distro #2197

merged 1 commit into from
Oct 17, 2024

Conversation

westonsteimel
Copy link
Contributor

azurelinux should be considered as providing a comprehensive vulnerability data source

@westonsteimel westonsteimel added the bug Something isn't working label Oct 17, 2024
@westonsteimel westonsteimel requested a review from a team October 17, 2024 08:55
@westonsteimel westonsteimel changed the title fix: azurelinux has comprehensive vuln source fix: azurelinux considered as comprehensive distro Oct 17, 2024
@westonsteimel
fix: azurelinux considered as comprehensive distro
a330d17 
azurelinux should be considered as providing a comprehensive vulnerability
data source

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
@westonsteimel westonsteimel force-pushed the azurelinux-as-comprehensive-distro branch from 31fad00 to a330d17 Compare October 17, 2024 08:57
@westonsteimel westonsteimel enabled auto-merge (squash) October 17, 2024 08:58
@westonsteimel
Copy link
Contributor Author

westonsteimel commented Oct 17, 2024 •
edited
Loading

An example image is mcr.microsoft.com/azurelinux/base/python:3.12.3-1-azl3.0.20240727 which should no longer display GHSA matches on setuptools with this change

@westonsteimel westonsteimel merged commit 8d11d45 into main Oct 17, 2024
10 checks passed
@westonsteimel westonsteimel deleted the azurelinux-as-comprehensive-distro branch October 17, 2024 13:38
@BrewTestBot BrewTestBot mentioned this pull request Oct 21, 2024
Merged
ADorigi pushed a commit to ADorigi/grype that referenced this pull request Oct 22, 2024
@westonsteimel @ADorigi
fix: azurelinux considered as comprehensive distro (anchore#2197)
2014826 
azurelinux should be considered as providing a comprehensive vulnerability
data source

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@spiffcs spiffcs spiffcs approved these changes

Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@westonsteimel @spiffcs