Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: totals for vulnerability matches #1359

Merged
merged 1 commit into from
Jun 26, 2023

Conversation

kzantow
Copy link
Contributor

@kzantow kzantow commented Jun 23, 2023

This PR fixes a problem where the totals being reported did not always match the vulnerabilities displayed. The issue is that some filtering occurred for known invalid matches after the totals were added.

Fixes #1312

@spiffcs spiffcs merged commit ab0a31a into anchore:main Jun 26, 2023
@kzantow kzantow deleted the fix/filtered-vuln-totals branch June 26, 2023 18:15
spiffcs added a commit to shanedell/grype that referenced this pull request Jul 11, 2023
* main: (23 commits)
  Remove Docker section from DEVELOPING.md (anchore#1384)
  chore(deps): update bootstrap tools to latest versions (anchore#1381)
  chore(deps): bump github.com/docker/docker (anchore#1382)
  Port to new syft source API (anchore#1376)
  chore(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (anchore#1375)
  chore: bump quality gate labels and images (anchore#1374)
  chore(deps): update bootstrap tools to latest versions (anchore#1368)
  Add a simple CSV format template to the templates/ directory and tweak docs (anchore#1366)
  chore(deps): update Syft to v0.84.1 (anchore#1372)
  fix: Add more log4j-adjacent package ignore rules (anchore#1358)
  chore: bump the quality gate labels (anchore#1369)
  add oss community board auto-add workflow (anchore#1364)
  fix: totals for vulnerability matches (anchore#1359)
  chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 (anchore#1363)
  chore(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 (anchore#1357)
  Configure chronicle to pre-1.0 mode (anchore#1356)
  chore(deps): update Syft to v0.84.0 (anchore#1354)
  chore(deps): update bootstrap tools to latest versions (anchore#1353)
  chore(deps): update Syft to v0.83.1 (anchore#1352)
  chore(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 (anchore#1350)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

The summary by severity is confusing
2 participants