-
Bug
-
Resolution: Done
-
Major
-
None
-
False
-
False
-
The Debian OVAL feed lists vulnerabilities with a package name, however, the package name is always the source package (ie. openssh) whereas when we index a layer, we find the binary packages (i.e. openssh-client).
At ingest time, we need to build a relationship between source and binary packages.
- blocks
-
PROJQUAY-2473 Image vulnerability in non-base layers can't be scanned by Clair V4.2.2
- Closed
- is related to
-
PROJQUAY-2771 Problems with detecting vulnerabilities when using Clair v4
- Closed