meta/classes/cve-check.bbclass

8 # CVE found and generate a file in the recipe WORKDIR/cve
23 # The product name that the CVE database uses defaults to BPN, but may need to
64 # Skip CVE Check for packages (PN)
67 # Ingore the check for a given list of CVEs. If a CVE is found,
69 # space separated CVE values:
71 # CVE_CHECK_IGNORE = 'CVE-2014-2524 CVE-2018-1234'
90         bb.note("Generating JSON CVE summary")
124         bb.plain("Complete CVE report summary created at: %s" % cvefile_link)
130         bb.plain("Complete CVE JSON report summary created at: %s" % json_summary_link_name)
153             bb.note("No CVE database found, skipping CVE check")
163     Delete the file used to gather all the CVE information.
174     Create CVE manifest when building an image
198     bb.note("Writing rootfs CVE manifest")
236         bb.plain("Image CVE report stored in: %s" % manifest_name)
246         bb.plain("Image CVE JSON report stored in: %s" % manifest_name)
293         # Find all relevant CVE IDs.
370             bb.note("No CVE records found for product %s, pn %s" % (product, pn))
376         bb.note("No CVE records for products in recipe %s" % (pn))
382     Get CVE information from the database.
406     Write CVE information in WORKDIR; and to CVE_CHECK_DIR, and
407     CVE manifest if enabled.
444         write_string += "CVE: %s\n" % cve
446             write_string += "CVE STATUS: Ignored\n"
448             write_string += "CVE STATUS: Patched\n"
451             write_string += "CVE STATUS: Unpatched\n"
452         write_string += "CVE SUMMARY: %s\n" % cve_data[cve]["summary"]
459 …bb.warn("Found unpatched CVE (%s), for more information check %s" % (" ".join(unpatched_cves),cve_…
462         bb.note("Writing file %s with CVE information" % cve_file)
480     Write CVE information in the JSON format: to WORKDIR; and to
481     CVE_CHECK_DIR, if CVE manifest if enabled, write fragment
489         bb.note("Writing file %s with CVE information" % direct_file)
510     Prepare CVE data for the JSON format, then write it.
586     Write CVE data in each enabled format.