fleet/changes/24009-gh-translation at 0654172fa2fd4aa7cbf93a59b360b7eb4dbe3daf - Elgato_dark/fleet - Forgejo: Beyond coding. We Forge.

Elgato_dark/fleet

mirror of https://github.com/fleetdm/fleet synced 2026-05-23 17:08:53 +00:00

Konstantin Sykulev 1446d28029

github cli false negative vulnerability (#24100 )

Added a cpe translation for the `gh` command. The software is identified
as `gh`, however, the cpe (`cpe:2.3🅰️github:cli:2.62.0:*:*:*:*:*:*:*`)
name is labeled as `cli`, thus the mismatch.

https://github.com/fleetdm/fleet/issues/24009

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

2024-11-25 12:32:10 -06:00

1 line

No EOL

103 B

Text

Raw Blame History

* Fixed an issue where the github cli software name was not matching against the cpe vulnerability name