Hi,
Le mar. 12 mars 2024 à 15:45, Stephen Jolley a
écrit :
>
>-
>
>The previously reported CVE database update issue on the autobuilder
>has not been addressed yet. This is causing higher numbers of CVEs to be
>reported on the autobuilder generated charts.
>
> Here's my proposal to fix this :
- [PATCH 2/2] cve-update-nvd2-native: Add an age threshold for
incremental update
https://lists.openembedded.org/g/openembedded-core/message/197046
- [yocto-autobuilder2][PATCH] schedulers: metrics: Start with master for
the daily full download
https://lists.yoctoproject.org/g/yocto/message/62754
- [yocto-autobuilder-helper][PATCH] config.json: metrics: Switch to
daily CVE DB full-download
https://lists.yoctoproject.org/g/yocto/message/62753
Those 3 patches work together to (hopefully) do a daily full download of
the NVD CVE database. That should fix the metrics on master and any branch
sharing the CVE database with it.
Best regards,
--
Yoann Congal
Smile ECS - Tech expert
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#197080):
https://lists.openembedded.org/g/openembedded-core/message/197080
Mute This Topic: https://lists.openembedded.org/mt/104885738/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-