#1029: Extended trivy rego for Kernel CVE's (#1031)

fixes #1029
exasol · Dec 5, 2024 · 154f465 · 154f465
1 parent 2fb1494
commit 154f465
Show file tree

Hide file tree

Showing 6 changed files with 423 additions and 380 deletions.
diff --git a/.current_gitmodules b/.current_gitmodules
diff --git a/doc/changes/changes_9.1.0.md b/doc/changes/changes_9.1.0.md
@@ -18,7 +18,7 @@ This release uses version 1.0.0 of the container tool.
 
 ## Security Issues
 
- n/a
+  - #1029: Extended trivy rego for Kernel CVE's
 
 ## Refactorings
 

diff --git a/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy.rego b/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/flavors/template-Exasol-all-r-4/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-all-r-4/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
-Original file line number
+Diff line change
@@ Expand Up / @@ -18,7 +18,7 @@ This release uses version 1.0.0 of the container tool. @@
     ## Security Issues
-     n/a
+      - #1029: Extended trivy rego for Kernel CVE's
     ## Refactorings
@@ Expand Down @@