Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Red Hat version comparison support #1336

Open
hogo6002 opened this issue Oct 22, 2024 · 3 comments · May be fixed by #1355
Open

Add Red Hat version comparison support #1336

hogo6002 opened this issue Oct 22, 2024 · 3 comments · May be fixed by #1355
Assignees
Labels
enhancement New feature or request

Comments

@hogo6002
Copy link
Contributor

Following osv.dev's recent addition of support for RPM versions, osv-scanner should also add a version-rmp.go file in internal/semantic to support Red Hat version comparison.

@G-Rath G-Rath self-assigned this Oct 22, 2024
@oliverchang oliverchang added the enhancement New feature or request label Oct 23, 2024
@G-Rath
Copy link
Collaborator

G-Rath commented Oct 24, 2024

It looks like RedHat isn't available on production yet, so there's not `all.zip db available which is needed to write a fixtures generator, and it doesn't seem like there's a staging equivalent of the bucket.

Strictly speaking that shouldn't block this but it would be great to have if possible (and in particular I'm primarily wondering if it could be possible for someone to get a one-time all.zip from staging?)

@hogo6002
Copy link
Contributor Author

It looks like RedHat isn't available on production yet, so there's not `all.zip db available which is needed to write a fixtures generator, and it doesn't seem like there's a staging equivalent of the bucket.

Rocky Linux is based on Red Hat, I think we can use its all.zip first to generate fixtures. We can also use all.zip from AlmaLinux and SUSE.

@another-rex
Copy link
Collaborator

it doesn't seem like there's a staging equivalent of the bucket.

We do have a private one for the staging environment, I added you as a viewer to it now: Should be able to download the all.zip here: https://storage.mtls.cloud.google.com/osv-test-vulnerabilities/Red%20Hat/all.zip

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants