#1029: Extended trivy rego for Kernel CVE's

exasol · Dec 5, 2024 · f4af2bc · f4af2bc
1 parent 2fb1494
commit f4af2bc
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/.current_gitmodules b/.current_gitmodules
diff --git a/doc/changes/changes_9.1.0.md b/doc/changes/changes_9.1.0.md
@@ -18,7 +18,7 @@ This release uses version 1.0.0 of the container tool.
 
 ## Security Issues
 
- n/a
+  - #1029: Extended trivy rego for Kernel CVE's
 
 ## Refactorings
 

diff --git a/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy.rego b/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/flavors/template-Exasol-all-r-4/flavor_base/security_scan/trivy.rego b/flavors/template-Exasol-all-r-4/flavor_base/security_scan/trivy.rego
@@ -6,5 +6,5 @@ default ignore = false
 
 ignore {
         input.PkgName == "linux-libc-dev"
-        regex.match("^kernel:", input.Title)
+        regex.match("^(kernel:|In the Linux kernel)", input.Title)
 }
diff --git a/script-languages b/script-languages
-Original file line number
+Diff line change
@@ Expand Up / @@ -18,7 +18,7 @@ This release uses version 1.0.0 of the container tool. @@
     ## Security Issues
-     n/a
+      - #1029: Extended trivy rego for Kernel CVE's
     ## Refactorings
@@ Expand Down @@
+1 −1		flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.rego
+1 −1		flavors/template-Exasol-all-java-17/flavor_base/security_scan/trivy.rego
+1 −1		flavors/template-Exasol-all-python-3.10-conda/flavor_base/security_scan/trivy.rego
+1 −1		flavors/template-Exasol-all-python-3.10/flavor_base/security_scan/trivy.rego