Ross Tannenbaum

NetworkPolicy v1 is out of order in Cluster APIs section

4

Reference: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#networkpolicy-v1-networking-k8s-io I'm looking at the v1.30 docs (I also saw this is the case for v1.28 and v1.29), and it looks like NetworkPolicy is out of place, as it's...

fix(scanner): Scanner V4 client makes unnecessary connections

4

### Description Followup to https://github.com/stackrox/stackrox/pull/11161 which actually failed to fix the problem. The Scanner V4 client now requires users to specify the address(es) for the Indexer and/or Matcher. This way,...

chore(scanner): cleanup scannerdefs httphandler

3

### Description * This updates the `httpHandler` struct to add three new fields: * `dataDir` - defines the root directory to which all data is written * `uploadPath` - defines...

chore(scanner): remove cleanup func from openArchive

3

### Description * Remove the returned clean func from `openFromArchive`, as there is no purpose for it * Close access to file upon failure - was previously a potential memory...

chore(scanner): rename vars/funcs in defs handler

3

### Description * This updates the global variables: renames some, adds some * This also adds a few comments in a few places and replaces the panic call with `utils.CrashOnError`...

chore(central): move scannerdefinitions funcs for readability (#11282)

2

### Description This is a cherry-pick for something which was already merged, which I somehow deleted... * https://github.com/stackrox/stackrox/pull/11212 * https://github.com/stackrox/stackrox/pull/11825 (replaces https://github.com/stackrox/stackrox/pull/11282 which was originally merged into here but was...

chore(central): more cleanup

2

### Description * Clean validateV4DefsVersion * Create a validate closure to remove defer calls from loop * `s/Errorf/Error` * Minor nits to `handleZipContentsFromVulnDump` and `handleScannerDefsFile` * Updated tests and added...

chore(central): cleanup more handlers

3

### Description * Add comments and does minor cleanup to `get` * Clean `openDefinitions` and remove unnecessary logs * Cleaned `openOfflineDefinitions` * updated log message to remove V4 reference *...

Claircore does not fetch Oracle ELSAs from the current year

1

As of at least v1.5.31, Claircore does not fetch Oracle Linux vulnerabilities from the current year. See https://github.com/quay/claircore/blob/v1.5.31/oracle/updaterset.go#L13 I fixing this brings an opportunity to improve the Oracle Linux support:...