
This change enables the capability to track if a CVE to be fixed already has an open launchpad in starlingx: https://bugs.launchpad.net/starlingx/ This will help the security team to focus on the CVEs that do not have a launchpad already open, reducing the overhead of analysis of CVEs already presented to the development team. Story:2006971 Change-Id: I494f0221cb52a4bf7ace20d75e067b17c719d749 Signed-off-by: VictorRodriguez <vm.rod25@gmail.com>
105 lines
2.3 KiB
Plaintext
105 lines
2.3 KiB
Plaintext
<head></head>
|
|
<body>
|
|
<h1>Security report from vuls scan from {{title}}</h1>
|
|
<h2>CVEs to fix w/o a launchpad assigned: {{cves_to_fix | length}}</h2>
|
|
<table>
|
|
{% if cves_to_fix|length >= 1 %}
|
|
<tr>
|
|
{% for head in heads %}
|
|
<th>{{head}}</th>
|
|
{% endfor %}
|
|
</tr>
|
|
|
|
{% for cve in cves_to_fix %}
|
|
<tr>
|
|
<td>{{cve["id"]}}</td>
|
|
<td>{{cve["status"]}}</td>
|
|
<td>{{cve["cvss2Score"]}}</td>
|
|
<td>{{cve["av"]}}</td>
|
|
<td>{{cve["ac"]}}</td>
|
|
<td>{{cve["au"]}}</td>
|
|
<td>{{cve["ai"]}}</td>
|
|
</tr>
|
|
{% endfor %}
|
|
{% endif %}
|
|
</table>
|
|
<h2>CVEs to fix w/ a launchpad assigend: {{cves_to_fix_lp | length}}</h2>
|
|
<table>
|
|
{% if cves_to_fix_lp|length >= 1 %}
|
|
<tr>
|
|
{% for head in heads %}
|
|
<th>{{head}}</th>
|
|
{% endfor %}
|
|
</tr>
|
|
|
|
{% for cve in cves_to_fix_lp %}
|
|
<tr>
|
|
<td>{{cve["id"]}}</td>
|
|
<td>{{cve["status"]}}</td>
|
|
<td>{{cve["cvss2Score"]}}</td>
|
|
<td>{{cve["av"]}}</td>
|
|
<td>{{cve["ac"]}}</td>
|
|
<td>{{cve["au"]}}</td>
|
|
<td>{{cve["ai"]}}</td>
|
|
</tr>
|
|
{% endfor %}
|
|
{% endif %}
|
|
</table>
|
|
<h2> CVEs to track for incoming fix: {{cves_to_track | length}}</h2>
|
|
<table>
|
|
{% if cves_to_track|length >= 1 %}
|
|
<tr>
|
|
{% for head in heads %}
|
|
<th>{{head}}</th>
|
|
{% endfor %}
|
|
</tr>
|
|
|
|
{% for cve in cves_to_track %}
|
|
<tr>
|
|
<td>{{cve["id"]}}</td>
|
|
<td>{{cve["status"]}}</td>
|
|
<td>{{cve["cvss2Score"]}}</td>
|
|
<td>{{cve["av"]}}</td>
|
|
<td>{{cve["ac"]}}</td>
|
|
<td>{{cve["au"]}}</td>
|
|
<td>{{cve["ai"]}}</td>
|
|
</tr>
|
|
{% endfor %}
|
|
{% endif %}
|
|
</table>
|
|
<h2> CVEs to omit: {{cves_to_omit | length}}</h2>
|
|
<table>
|
|
{% if cves_to_omit|length >= 1 %}
|
|
<tr>
|
|
{% for head in heads %}
|
|
<th>{{head}}</th>
|
|
{% endfor %}
|
|
</tr>
|
|
|
|
{% for cve in cves_to_omit %}
|
|
<tr>
|
|
<td>{{cve["id"]}}</td>
|
|
<td>{{cve["status"]}}</td>
|
|
<td>{{cve["cvss2Score"]}}</td>
|
|
<td>{{cve["av"]}}</td>
|
|
<td>{{cve["ac"]}}</td>
|
|
<td>{{cve["au"]}}</td>
|
|
<td>{{cve["ai"]}}</td>
|
|
</tr>
|
|
{% endfor %}
|
|
{% endif %}
|
|
</table>
|
|
|
|
<h2>ERROR: CVEs that have no cvss2Score or cvss2Vector:{{cves_w_errors | length}}</h2>
|
|
<table>
|
|
{% if cves_w_errors|length >= 1 %}
|
|
{% for cve in cves_to_track %}
|
|
<tr>
|
|
<td>{{cve["id"]}}</td>
|
|
<td>{{cve["status"]}}</td>
|
|
</tr>
|
|
{% endfor %}
|
|
{% endif %}
|
|
</table>
|
|
</body>
|