Skip to content

Add config for CPE part filtering #410

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 16, 2024
Merged

Add config for CPE part filtering #410

merged 1 commit into from
Oct 16, 2024

Conversation

@wagoodman
Copy link
Contributor

@wagoodman wagoodman commented Oct 15, 2024 •
edited
Loading

A new build.include-cpe-parts configuration has been added that will only allow including CPES from NVD entries with a specific part value. The CLI validates that only a, h, and o may be provided from the user. The default is to include only a.

# .grype-db.yaml
build:
    include-cpe-parts: ["a", "o"]

@wagoodman wagoodman self-assigned this Oct 15, 2024
@wagoodman wagoodman changed the title Add config option for enabling OS cpes in DB Add config for CPE part filtering Oct 16, 2024
@wagoodman wagoodman marked this pull request as ready for review October 16, 2024 18:22
@wagoodman wagoodman requested review from a team and westonsteimel October 16, 2024 18:23
@wagoodman wagoodman added the enhancement New feature or request label Oct 16, 2024
@wagoodman wagoodman enabled auto-merge (squash) October 16, 2024 18:29
@wagoodman wagoodman merged commit 29aad0c into main Oct 16, 2024
14 checks passed
@wagoodman wagoodman deleted the allow-os-cpes branch October 16, 2024 18:50
@willmurphyscode willmurphyscode mentioned this pull request Oct 17, 2024
Closed
@domWalters
Copy link

FYI, the configuration option build.include-cpe-parts is not documented in the configuration portion of your README.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kzantow kzantow kzantow approved these changes

@westonsteimel westonsteimel Awaiting requested review from westonsteimel

Assignees

@wagoodman wagoodman

Labels

enhancement New feature or request

Projects

OSS
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@wagoodman @domWalters @kzantow