Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No vulnerability information for Ubuntu 20.04 and 22.04 #179

Closed
czunker opened this issue Nov 10, 2022 · 1 comment
Closed

No vulnerability information for Ubuntu 20.04 and 22.04 #179

czunker opened this issue Nov 10, 2022 · 1 comment

Comments

@czunker
Copy link
Contributor

czunker commented Nov 10, 2022

Describe the bug
When querying for vulnerability data, the result is empty:

cnspec> asset.vulnerabilityReport
asset.vulnerabilityReport: {
  platform: {
    arch: "x86_64"
    name: "ubuntu"
    release: "22.04"
    title: "Ubuntu 22.04.1 LTS, bare metal"
  }
  published: "2022-11-10T14:11:31+01:00"
  stats: {
    advisories: {}
    cves: {}
    exploits: {}
    packages: {
      total: 2315.000000
    }
  }
}
cnspec> asset.title
asset.title: "Ubuntu 22.04.1 LTS, bare metal"

The same happens for Ubuntu 20.04.

To Reproduce
Steps to reproduce the behavior:

  1. Open a cnspec shell into an ubuntu:20.04 image: cnspec shell docker image ubuntu:20.04
  2. query for vulnerability data: asset.vulnerabilityReport
  3. See empty report

Expected behavior
Report should show data, when the are known CVEs.

Screenshots or CLI Output

Desktop (please complete the following information):

  • OS: Ubuntu 22.04 or 20.04
  • cnspec 7.2.0

Additional context

@czunker czunker closed this as not planned Won't fix, can't repro, duplicate, stale Nov 10, 2022
@chris-rock
Copy link
Member

I cannot re-produce the issue, the data is available. At the moment we require a login via cnspec login to gather the data. Going forward that requirement is going away.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants