Skip to content

v1.5.53 Release

Choose a tag to compare

View all tags
@crozzy crozzy released this 17 Jul 19:43
v1.5.53
This tag was signed with the committer’s verified signature.
crozzy Joseph Crosland
GPG key ID: E19DC9275F5CE579
Verified
Learn about vigilant mode.
b14401b
This commit was signed with the committer’s verified signature.
crozzy Joseph Crosland
GPG key ID: E19DC9275F5CE579
Verified
Learn about vigilant mode.

v1.5.53 - 2026-07-17

  • claircore: support "not affected" vulnerability assertions

    Vulnerability reports can now surface explicit "not vulnerable" assertions via PackageNotVulnerable. Matching records with Vulnerability.Invert set are kept out of PackageVulnerabilities. The matcher DB persists this as vuln.not_vulnerable.

    The Red Hat VEX updater now ingests known_not_affected product status
    as inverted vulnerabilities.

  • acceptance: add the acceptance testing framework

    The acceptance testing framework allows users to hook into claircore's integration testing by calling acceptance.Run() and providing an Auditor. A claircore Auditor is provided and it allows users to test expected claircore results against real results using fixed inputs: VEX data and container images.

  • postgres: add existence check to type in all cases

    Having both matcher and indexer tables in the same database isn't explicitly allowed or disallowed. This makes it order independent anyway and avoids migration conflict errors.
Assets 2
Loading