Details
Description
Currently, Clair v4 does not show severity info for any of the Alpine packages. This breaks previous Clair 3.3.x functionality which did show vulnerability information and is making clair v4 unusable for users who rely on Alpine images in their pipelines.
Marking as blocker.
Attachments
Issue Links
- duplicates
-
PROJQUAY-1724 Clair v4 uses NVD data to complement missing severity
- Closed