Clair v4.7.1 enables the ingestion of unpatched vulnerabilities from RHEL sources, this leads to a fairly large change for all RHEL vulnerability reports. We decided to turn this off on quay.io and we need to do the same for downstream Quay.

The config stanza that needs to be added.

updaters:
  config:
    rhel:
      ignore_unpatched: true