carrtech/ct-ops
3
0
Fork 0
Code Issues 28 Pull requests Projects Releases 750 Packages Wiki Activity Actions

fix(ct-cve): send rpm source evr in inventory #87

Merged
simon merged 1 commit from fix/alma-ct-cve-results into main 2026-05-24 12:53:25 +00:00
Conversation 0 Commits 1 Files changed 6 +141 -44
simon commented 2026-05-24 12:49:36 +00:00
Owner
Copy link

Summary

  • send full RPM source EVR for Alma/RHEL package inventory
  • include CT-CVE matching metadata in ingest inventory fingerprints
  • align web CT-CVE package fingerprints with printable SHA-256 format

Validation

  • go test ./internal/ctcve ./internal/handlers (apps/ingest)
  • go test ./internal/tasks ./cmd/agent (agent)
  • pnpm --dir apps/web exec node --experimental-strip-types --test 'lib/integrations/ct-cve/*.test.mjs'
## Summary - send full RPM source EVR for Alma/RHEL package inventory - include CT-CVE matching metadata in ingest inventory fingerprints - align web CT-CVE package fingerprints with printable SHA-256 format ## Validation - go test ./internal/ctcve ./internal/handlers (apps/ingest) - go test ./internal/tasks ./cmd/agent (agent) - pnpm --dir apps/web exec node --experimental-strip-types --test 'lib/integrations/ct-cve/*.test.mjs'
fix(ct-cve): send rpm source evr in inventory
All checks were successful
Conventional PR title / Conventional PR title (pull_request) Successful in 1s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 7s
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Successful in 9s
Details
SAST / trivy (filesystem) (pull_request) Successful in 20s
Details
SAST / semgrep (pull_request) Successful in 46s
Details
Secret Scan / gitleaks (pull_request) Successful in 13s
Details
PR Checks (Go) / Go (test / build) (pull_request) Successful in 57s
Details
SAST / trivy (config / IaC) (pull_request) Successful in 20s
Details
SAST / gosec (ingest) (pull_request) Successful in 1m15s
Details
SAST / gosec (agent) (pull_request) Successful in 1m23s
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Successful in 1m38s
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Successful in 1m51s
Details
PR Checks (Web) / Web (lint / type-check / build) (pull_request) Successful in 2m48s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Successful in 2m49s
Details
b756b24a39
simon merged commit fdc95301ba into main 2026-05-24 12:53:25 +00:00
simon deleted branch fix/alma-ct-cve-results 2026-05-24 12:53:25 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
E2E Failure
Regression found by end-to-end automation

  
area:agent
Go agent

  
area:audit-log
Audit logging

  
area:auth
Authentication

  
area:authz
Authorisation / RBAC

  
area:ci
CI / tooling / scanning

  
area:crypto
Cryptography / secrets

  
area:db
Database / schema

  
area:docker
Docker / deployment

  
area:headers
HTTP headers / CSP

  
area:ingest
gRPC ingest service

  
area:ldap
LDAP integration

  
area:rate-limit
Rate limiting / abuse prevention

  
area:ssrf
Server-side request forgery

  
area:supply-chain
Supply chain / deploy

  
area:terminal
Terminal / PTY

  
autorelease: pending

   
autorelease: tagged

   
bug
Something isn't working

  
claude-working

   
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
priority: critical
Critical - blocking or data loss

  
priority: high
High priority - should be addressed soon

  
priority: low
Low priority - nice to have

  
priority: medium
Medium priority - address after high priority items

  
question
Further information is requested

  
security
Security finding from pre-pentest audit

  
sev:critical
Severity: Critical

  
sev:high
Severity: High

  
sev:info
Severity: Informational / Hardening

  
sev:low
Severity: Low

  
sev:medium
Severity: Medium

  
tests-required
Needs tests or stronger coverage before fix is complete

  
wontfix
This will not be worked on

No labels
E2E Failure
area:agent
area:audit-log
area:auth
area:authz
area:ci
area:crypto
area:db
area:docker
area:headers
area:ingest
area:ldap
area:rate-limit
area:ssrf
area:supply-chain
area:terminal
autorelease: pending
autorelease: tagged
bug
claude-working
documentation
duplicate
enhancement
good first issue
help wanted
invalid
priority: critical
priority: high
priority: low
priority: medium
question
security
sev:critical
sev:high
sev:info
sev:low
sev:medium
tests-required
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carrtech/ct-ops!87
No description provided.