Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Auto-refreshing Official Kubernetes CVE Feed: a tool to auto create new CVE issues in klts #164

Open
pacoxu opened this issue May 26, 2022 · 2 comments
Open

Auto-refreshing Official Kubernetes CVE Feed: a tool to auto create new CVE issues in klts #164

pacoxu opened this issue May 26, 2022 · 2 comments
Labels
feature New feature or request good first issue Good for newcomers help wanted Extra attention is needed official-cve-feed priority/critical Critical(9.0≤Score) CVSS Score CVE

Comments

@pacoxu
Copy link
Member

pacoxu commented May 26, 2022 •
edited
Loading

What would you like to be added?

KEP-3203: Add Auto-refreshing Official CVE feed
kubernetes/enhancements#3204
kubernetes/enhancements#3203

Why is this needed?

new label official-cve-feed
@github-actions
Copy link

Hi @pacoxu,
Thanks for opening an issue!
We will look into it as soon as possible.

Details Instructions for interacting with me using comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the [gh-ci-bot](https://github.com/wzshiming/gh-ci-bot) repository.

@pacoxu
Copy link
Member Author

pacoxu commented Sep 13, 2022

https://kubernetes.io/blog/2022/09/12/k8s-cve-feed-alpha/ is released.

curl -Ls https://k8s.io/docs/reference/issues-security/official-cve-feed/index.json  | jq -r '.items[0]

We can write a small tool based on the API to auto create issue for CVEs.

@pacoxu pacoxu added feature New feature or request good first issue Good for newcomers help wanted Extra attention is needed priority/critical Critical(9.0≤Score) CVSS Score CVE labels Sep 13, 2022
@pacoxu pacoxu changed the title kubernetes has a proposal to label issues for cve Auto-refreshing Official Kubernetes CVE Feed: a tool to auto create new CVE issues in klts Sep 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature New feature or request good first issue Good for newcomers help wanted Extra attention is needed official-cve-feed priority/critical Critical(9.0≤Score) CVSS Score CVE
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@pacoxu