vulnerability-operator

vulnerability-operator copied to clipboard

Initial thoughts and ideas

1

**Sources** * [x] Load SBOMs from Git-Repository (previously created from `sbom-operator`) * [x] Cron-Trigger (like `sbom-operator`) * [ ] Webhook-Trigger (e.g. called from `sbom-operator`) **Targets** * [x] Prometheus-Metrics (⚠️ needs...

ckotzbauer

deps: update module github.com/anchore/syft to v0.103.1

1

[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/anchore/syft](https://togithub.com/anchore/syft) | `v0.100.0` -> `v0.103.1` | [](https://docs.renovatebot.com/merge-confidence/)...

renovate[bot]

deps: update module github.com/anchore/grype to v0.74.4

1

[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/anchore/grype](https://togithub.com/anchore/grype) | `v0.74.0` -> `v0.74.4` | [](https://docs.renovatebot.com/merge-confidence/)...

renovate[bot]

doc: document the required directory structure for git repo and the requirement that a container must be running on k8s cluster

3

Preamble: When I first tried out installing this app, I manually generated a single sbom and put it in a repo. I was getting an empty `results.json` file. I hacked...

samcornwell

question: the purpose of audit vs ignore rules, and what is the purpose of the two different config files

1

I was wondering what is the intended purpose of audit rules and ignore rules? Me and my team have guessed that ignore rules are for false positives. We have also...

samcornwell

feat: Optional output of grype and prometheus debug statements

4

While I was debugging an issue, I decided to enable the logging package in the grype module so that I could see if my sbom was actually being processed (I...

samcornwell

Support for OCI Registries

6

Hi, according to the documentation: `This operator scans all SBOMs from a git-repository for vulnerabilities using Grype` The **sbom-operator** could generate a SBOM and store it into an OCI-Registry. Do...

nlamirault

:sparkles: add optional kube

2

maxlerebourg

invalid memory address or nil pointer dereference

1

Hey Christian, starting with 0.23.0 i get the error "invalid memory address or nil pointer dereference". See debug logs below. In addition, i tested the versions 0.24.0, 0.25.0 and 0.26.0...

devRoemer

deps: update module github.com/anchore/grype to v0.82.0

1

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/anchore/grype](https://redirect.github.com/anchore/grype) | `v0.80.0` -> `v0.82.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...

renovate[bot]