Anchore FP Management Corrections Tool

This is meant as a temporary tool to facilitate the adding of multiple package corrections to Anchore.

Long term, Anchore is working on an Enteprise CLI called anchorectl that will replace the functionality of this tool. Once that is released (coming soon), this tool will become deprecated.

Prerequisites

This script has two dependencies:

• go version 1.16
• dependencies download. This can be done by running go mod download in the root of the repository
• edit the config and add your Anchore deployment information

Execute this script with:

go run main.go

Correction Content

The corrections.json contains a list of Anchore False-Positive Management Package Corrections for various common java packages. This can be customized (but the schema should be maintained) as needed.