kevinveenbirkenbachandClaude Opus 5.5 43bef02d2c feat(security): keep suppressed CVEs listed in the per-image vulnerability issues ...

The make test-security report now holds every finding at the threshold, a
suppressed one with its suppressed_until day, and the scan fails only on the
unsuppressed rows. The per-image issue keeps listing a suppressed CVE with
that day, unsuppressed and CRITICAL rows first, so the issue stays open
while a suppression runs instead of closing until it expires. The job
summary counts the failing findings and names the suppressed total apart.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-03 12:42:10 +01:00

..

__init__.py

…

test_database.py

feat(ci): rotate the vulnerability engine per row and hand its databases over

2026-11-01 02:44:58 +01:00

test_issues.py

feat(security): keep suppressed CVEs listed in the per-image vulnerability issues

2026-11-03 12:42:10 +01:00

test_scan.py

feat(security): keep suppressed CVEs listed in the per-image vulnerability issues

2026-11-03 12:42:10 +01:00

test_summary.py

feat(security): keep suppressed CVEs listed in the per-image vulnerability issues

2026-11-03 12:42:10 +01:00