Improve advisory coverage and report non-CVE fixes #36

Merged
autonomic-bot merged 1 commits from fix/rustdesk-cve-source into main 2026-11-02 19:41:04 +00:00
Owner

Verify CVE sources across the recipe fleet, classify NVD version ranges accurately, retain GHSA-only advisories, and display YES for security fixes without CVE IDs.

Validated: 88 scanner tests; authenticated source audit of all 23 recipes; staged upgrade-window scan of 15 recipes.

Verify CVE sources across the recipe fleet, classify NVD version ranges accurately, retain GHSA-only advisories, and display YES for security fixes without CVE IDs. Validated: 88 scanner tests; authenticated source audit of all 23 recipes; staged upgrade-window scan of 15 recipes.
autonomic-bot added 1 commit 2026-11-02 19:40:58 +00:00
autonomic-bot merged commit e37e10c86b into main 2026-11-02 19:41:04 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci-orchestrator#36