Page MenuHomeFreeBSD

Do not parse the output of pkg audit
ClosedPublic

Authored by bapt on May 23 2019, 1:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Dec 23 2023, 10:45 AM
Unknown Object (File)
Nov 18 2023, 1:15 PM
Unknown Object (File)
Nov 18 2023, 1:15 PM
Unknown Object (File)
Nov 18 2023, 1:15 PM
Unknown Object (File)
Nov 18 2023, 1:15 PM
Unknown Object (File)
Nov 18 2023, 1:01 PM
Unknown Object (File)
Oct 4 2023, 6:09 PM
Unknown Object (File)
Aug 3 2023, 6:20 AM
Subscribers

Details

Reviewers
None
Group Reviewers
portmgr
Commits
rP502793: Improve vulnerability checking
Summary

Do not parse the output of pkg audit to declare a package as vulnerable.

The return value is trustable for that so use it. In the futur the output may
change and would have make this script broken

Diff Detail

Repository
rP FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

Mk/Scripts/check-vulnerable.sh
27 ↗(On Diff #57762)

Is it a recent addition in our sh that we can assign a variable in a test ?

Mk/Scripts/check-vulnerable.sh
27 ↗(On Diff #57762)

Ah, no, for some reason, I thought this was not possible.

35 ↗(On Diff #57762)

I do not know where this is used, but I have a feeling that this should be kept, it changes the way the script works.

Keep the exit 1 which should have remained :)

This revision was not accepted when it landed; it landed in state Needs Review.May 27 2019, 1:02 PM
Closed by commit rP502793: Improve vulnerability checking (authored by bapt). · Explain Why
This revision was automatically updated to reflect the committed changes.