Currently, Clair v4 does not show severity info for any of the Alpine packages. This breaks previous Clair 3.3.x functionality which did show vulnerability information and is making clair v4 unusable for users who rely on Alpine images in their pipelines.
Marking as blocker.
- duplicates
-
PROJQUAY-1724 Clair v4 uses NVD data to complement missing severity
- Closed