Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-5134

Clair does not ignore gpg-pubkey in rpm databases

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • clair-4.6.1
    • None
    • clair

      gpg-pubkey is not an actual package, but rather a gpg public key used for rpm verification. It is just stored in the rpm database.

      The example below shows this entry in the DB only has a name and version, and no other useful attributes:

       

      [root@ae5eb32cd93d /]# rpm -qa gpg-pubkey --queryformat="%{name}\n%{evr}\n%{ARCH}\n%{RPMTAG_MODULARITYLABEL}\n[%{FILENAMES}\n].\n\n"
gpg-pubkey
d4082792-5b32db75
(none)
(none)
.


gpg-pubkey
fd431d51-4ae0493b
(none)
(none)
.

              rtannenb@redhat.com Ross Tannenbaum
              rtannenb@redhat.com Ross Tannenbaum
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: