[OE-core][PATCH v6 0/2] RFC: CVE-check handling

Andrej Valek
2023-06-20T14:16:26Z

After discussion in all parallel threads we proposed following variant which
covers both expressed requirements to have very small number of different cve
statuses and also very large number of them at the same time.
This is a compromise version which maybe is not ideal but deals with
conflicting responses we got.

This patches version is missing commit for CVE_CHECK_IGNORE to CVE_STATUS
conversion as it is large effort and current implementation is still in
discussion. Once the concept is agreed, that commit will be added in next
patchset version.

Documentation is not updated too while current implementation is still in
discussion.

meta/classes/cve-check.bbclass | 86 ++++++++++++++++---
meta/lib/oe/cve_check.py | 25 ++++++
meta/lib/oeqa/selftest/cases/cve_check.py | 26 ++++--
.../logrotate/logrotate_3.21.0.bb | 5 +-
4 files changed, 122 insertions(+), 20 deletions(-)

--
2.41.0