#1029: Extended trivy rego for Kernel CVE's (#482)

related to exasol/script-languages-release#1029
exasol · Dec 5, 2024 · ab70c0d · ab70c0d
1 parent cc30fcd
commit ab70c0d
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/flavors/template-Exasol-all-java-17/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-all-java-17/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/flavors/template-Exasol-all-python-3.10-conda/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-all-python-3.10-conda/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/flavors/template-Exasol-all-python-3.10/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-all-python-3.10/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }