search

canonical / sec-cvescan

Analyzes an Ubuntu system and checks for unpatched vulnerabilities.
GNU General Public License v3.0
88 stars 31 forks source link

When using manifest, please provide option to specify suite #92

Closed garyvdm closed 2 years ago

garyvdm commented 2 years ago

We don't install update-manager-core on our systems, and so to use cvescan from a manifest, we have to add a fake update-manager-core line to end of the manifest.

It would be nice to be able to specify the suite from the command line, something like:

cvescan --manifest image_manifest.txt --suite focal
dodys commented 2 years ago

Please check #52 and #54. I will be closing this issue based on that, even though v3.0 never got published.

Nevertheless, do note we don't currently have the resources to give cvescan the attention it deserves, and in the meantime we continue improving our OVAL data. I don't see us returning to cvescan in any real way soon, so please don't invest much time into it, I don't think we'll be able to reciprocate.

Thanks

garyvdm commented 2 years ago

Noted. Thank you.