deepfence / ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)
https://deepfence.io
Apache License 2.0
4.84k stars 584 forks source link

Package Base Filter #2203

Open sjkeerthi opened 5 months ago

sjkeerthi commented 5 months ago

Filter Package Base It will be great that if the filter for package base will really help users to find CVE those are interest on specific packages . During audit or if I want to check.

Current CVE TYPE really didn't help much

image

milan-deepfence commented 5 months ago

Hi @sjkeerthi I am guessing, you are trying to filter scans by a specific package and find CVEs on the package. The CVE Type filter shows you those list of packages(OS packages(Base packages), Golang, Rust, JavaScript etc) to filter by specific package. Let us know If you are looking something else.

image

sjkeerthi commented 5 months ago

No I am trying to search for example like.

image

Even I tried by selecting Base and after that in the search I tried didn't work image

ibreakthecloud commented 5 months ago

@sjkeerthi It seems like what you are looking for is generic way of searching through the list of CVE which is not in ThreatMapper. Because there is no option of kernel scan in scan types.