fleet/server/vulnerabilities
Victor Lyuboslavsky 8ab072f600
Fix CI: extend grace periods for MSRC feeds and expand test coverage for file validation. (#37991)
1. Root cause: cmd/msrc/generate.go

Problem: The MSRC feed generator panicked when the January 2026 feed
wasn't available. The grace period was only 5 days, but MSRC feed
publication dates vary (not available right now).

  Fix: Extended grace period from 5 to 15 days.

2. Defensive fix:
server/vulnerabilities/macoffice/integration_sync_test.go

Problem: Test only checked for files from the last 2 days, which failed
when the NVD repo hadn't published for a few days.

  Fix: Extended tolerance to 7 days.
2026-01-07 10:28:20 -06:00
..
customcve Switch vulns cron false positive clear to clear vulns based on when the vulns run started, rather than based on periodicity (#31364) 2025-07-29 10:14:14 -05:00
goval_dictionary validate generate-cve.yml outputs (#26752) 2025-03-12 14:49:47 -05:00
io Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
macoffice Fix CI: extend grace periods for MSRC feeds and expand test coverage for file validation. (#37991) 2026-01-07 10:28:20 -06:00
msrc Dedupe MSRC downloads/deletes when enrolled hosts include multiple builds of the same version of Windows (#27060) 2025-03-12 13:22:56 -05:00
nvd (releases on merge to main) Fix vuln false positives for "Logi Bolt.app" (#33920) 2025-10-27 16:55:30 -07:00
oval Add false-positive filtering for OVAL scanning (#33357) 2025-09-25 16:28:27 -04:00
testdata Add false-positive filtering for OVAL scanning (#33357) 2025-09-25 16:28:27 -04:00
utils Add gosimple linter (#23250) 2024-10-29 14:17:51 -05:00