quay / clair

Vulnerability Static Analysis for Containers

Home Page:https://quay.github.io/clair/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Is it possible to check cvss score using clairv4 API?

sunminjeon opened this issue · comments

Description of Problem / Feature Request

In Clairv4, CVSS information doesn't seem to show up in vulnerability reports.
Is it possible to check cvss score using clairv4 API?
(PR seems to have been merged in Clairecore. : quay/claircore#407)

  • Clair version/image: v4.3.4

What, if anything, appears in the enrichment object?

@hdonnay

There is no data in enrichment table.
(i did import-updaters process in offline mode)

clair=#
clair=# \dt;
                   List of relations
 Schema |           Name            | Type  |  Owner
--------+---------------------------+-------+----------
 public | dist                      | table | postgres
 public | dist_scanartifact         | table | postgres
 public | enrichment                | table | postgres
 public | indexreport               | table | postgres
 public | key                       | table | postgres
 public | layer                     | table | postgres
 public | libindex_migrations       | table | postgres
 public | libvuln_migrations        | table | postgres
 public | manifest                  | table | postgres
 public | manifest_index            | table | postgres
 public | manifest_layer            | table | postgres
 public | notification              | table | postgres
 public | notification_body         | table | postgres
 public | notifier_migrations       | table | postgres
 public | notifier_update_operation | table | postgres
 public | package                   | table | postgres
 public | package_scanartifact      | table | postgres
 public | receipt                   | table | postgres
 public | repo                      | table | postgres
 public | repo_scanartifact         | table | postgres
 public | scanned_layer             | table | postgres
 public | scanned_manifest          | table | postgres
 public | scanner                   | table | postgres
 public | scannerlist               | table | postgres
 public | uo_enrich                 | table | postgres
 public | uo_vuln                   | table | postgres
 public | update_operation          | table | postgres
 public | vuln                      | table | postgres
(28 rows)

clair=# select * from enrichment;
 id | hash_kind | hash | updater | tags | data
----+-----------+------+---------+------+------
(0 rows)

clair=#

Is this happening on the latest version?