recipe-maintainers/cc-ci-orchestrator
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: restore CVEs report column heading #35

Merged
autonomic-bot merged 1 commits from fix/report-cves-heading into main 2026-11-02 19:16:18 +00:00
Conversation 0 Commits 1 Files Changed 2
+2 -3
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.claude/skills/recipe-report/SKILL.md
+1 -1
View File
@@ -48,7 +48,7 @@ keeps every weekly edition looking the same regardless of which model writes the
lists **failed sources**, the count is **not** authoritative: render the cve cell as `?` lists **failed sources**, the count is **not** authoritative: render the cve cell as `?`
(unknown), never `none` — a blank that reads as "clean" is exactly how two CVSS-9.8 gitea (unknown), never `none` — a blank that reads as "clean" is exactly how two CVSS-9.8 gitea
RCEs were reported as "none" on 2026-08-07. RCEs were reported as "none" on 2026-08-07.
- The table's **CVEs fixed** column counts known CVEs addressed by the available recipe upgrade. - The table's **CVEs** column counts known CVEs addressed by the available recipe upgrade.
A zero for an up-to-date recipe means there is no upgrade window to credit; it does not A zero for an up-to-date recipe means there is no upgrade window to credit; it does not
certify that the running images are free of vulnerabilities. If an upgrade exists but its certify that the running images are free of vulnerabilities. If an upgrade exists but its
advisory scan is absent, a source failed, or an image window was unmatched, use `?`. advisory scan is absent, a source failed, or an image window was unmatched, use `?`.
cc-ci-plan/recipe-report.py
+1 -2
View File
@@ -217,8 +217,7 @@ def _table(rows, repo_url=None):
return "" return ""
# TESTS = the CI/test verdict (GREEN/FAILED/STALE/…); STATUS = the PR's LIVE state, fetched # TESTS = the CI/test verdict (GREEN/FAILED/STALE/…); STATUS = the PR's LIVE state, fetched
# client-side (open vs ✓ for any not-open state) by the inline script in _page(). # client-side (open vs ✓ for any not-open state) by the inline script in _page().
head = ("<tr><th>Recipe</th><th>Change</th><th>TESTS</th>" head = ("<tr><th>Recipe</th><th>Change</th><th>TESTS</th><th>CVEs</th>"
'<th title="Known CVEs fixed by the available recipe upgrade; zero does not certify the current image as vulnerability-free">CVEs fixed</th>'
"<th>CI</th><th>PR</th><th>STATUS</th><th>Notes</th></tr>") "<th>CI</th><th>PR</th><th>STATUS</th><th>Notes</th></tr>")
trs = [] trs = []
for r in rows: for r in rows: