Re: [OE-core] [PATCH] cve-check: add support for Ignored CVEs

2022-06-13 Thread Alexandre Belloni via lists.openembedded.org
Hello Marta, This seems to break the selftests: 2022-06-12 22:22:20,248 - oe-selftest - INFO - cve_check.CVECheck.test_recipe_report_json (subunit.RemotedTestCase) 2022-06-12 22:22:20,249 - oe-selftest - INFO - ... FAIL Stderr: 2022-06-12 22:07:57,462 - oe-selftest - INFO - Adding: "include

[OE-core] [PATCH] cve-check: add support for Ignored CVEs

2022-06-10 Thread Marta Rybczynska
Ignored CVEs aren't patched, but do not apply in our configuration for some reason. Up till now they were only partially supported and reported as "Patched". This patch adds separate reporting of Ignored CVEs. The variable CVE_CHECK_REPORT_PATCHED now manages reporting of both patched and ignored