search

anchore / vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)
Apache License 2.0
69 stars 25 forks source link

fix: grype_db #344 missing CVE/Package associations #650

Closed BenoitGui closed 1 month ago

BenoitGui commented 1 month ago

Fix https://github.com/anchore/vunnel/issues/655, some package where missing from sles database because of an error in the parser. The code avoid to crush old packages list when we have multiple criteria for the same os version. Thanks to @spiffcs and @willmurphyscode for the help

willmurphyscode commented 1 month ago

Thanks for the fix @BenoitGui! I'm going to try to add a unit test or two so that we don't have a regression here, and then we should be able to get this in.