From 9b8a323d8588e583d7d067b7b37d75ff1373fbdc Mon Sep 17 00:00:00 2001 From: Kota Kanbe Date: Thu, 24 Jan 2019 11:49:33 +0900 Subject: [PATCH] fix(report): detect 0 vulns for Amazon, FreeBSD, Raspbian (#765) --- report/report.go | 4 +++- report/util.go | 10 ++++++++++ 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/report/report.go b/report/report.go index 4267d16b..4d6a0ecb 100644 --- a/report/report.go +++ b/report/report.go @@ -56,7 +56,9 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode hostname, _ := os.Hostname() for _, r := range rs { if c.Conf.RefreshCve || needToRefreshCve(r) { - r.ScannedCves = models.VulnInfos{} + if ovalSupported(&r) { + r.ScannedCves = models.VulnInfos{} + } cpeURIs := []string{} if len(r.Container.ContainerID) == 0 { cpeURIs = c.Conf.Servers[r.ServerName].CpeNames diff --git a/report/util.go b/report/util.go index 84587916..3b1e76a5 100644 --- a/report/util.go +++ b/report/util.go @@ -318,6 +318,16 @@ func formatChangelogs(r models.ScanResult) string { } return strings.Join(buf, "\n") } +func ovalSupported(r *models.ScanResult) bool { + switch r.Family { + case + config.Amazon, + config.FreeBSD, + config.Raspbian: + return false + } + return true +} func needToRefreshCve(r models.ScanResult) bool { if r.Lang != config.Conf.Lang {