HyperWinX/brew
1
0
Fork 0
mirror of https://github.com/Homebrew/brew.git synced 2026-08-12 22:29:27 +04:00
Code Issues Packages Projects Releases Wiki Activity

vulns: add --fix-available and --no-fix-available flags

Browse Source
This commit is contained in:
Kyle Marek-Spartz
2026-08-01 14:21:14 -05:00
parent 1f3abf43a3
commit 88746e955d
17 changed files with 489 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Formula-Cookbook.md
+1 -1
View File
@@ -634,7 +634,7 @@ patch do
end
```
`resolves` records what the patch fixes: one or more CVE identifiers (`CVE-YYYY-NNNN`), GHSA identifiers (`GHSA-xxxx-xxxx-xxxx`) or issue/PR URLs. CVE identifiers are also inferred automatically from the patch `url`, `apply` paths and `file` path, so a Debian-style `CVE-2016-2399.patch` is picked up without an explicit `resolves`.
`resolves` records what the patch fixes: one or more CVE identifiers (`CVE-YYYY-NNNN`), GHSA identifiers (`GHSA-xxxx-xxxx-xxxx`), OSV identifiers (`OSV-YYYY-NNNN`) or issue/PR URLs. CVE identifiers are also inferred automatically from the patch `url`, `apply` paths and `file` path, so a Debian-style `CVE-2016-2399.patch` is picked up without an explicit `resolves`.
```ruby
patch do
docs/Manpage.md
+12
View File
@@ -2557,6 +2557,18 @@ With no arguments, all installed formulae are checked.
: Check formulae listed in a Brewfile. Defaults to `./Brewfile`; use
`--brewfile=`*`path`* to specify another.
`--fix-available`
: Only report vulnerabilities that have a fix available. Note that this may
exclude vulnerabilities with fixes available if we cannot determine that the
fix is included in the version under consideration.
`--no-fix-available`
: Only report vulnerabilities that do not have a fix available. Note that this
may include vulnerabilities with fixes available if we cannot determine that
the fix is included in the version under consideration.
`-s`, `--severity`
: Only report findings at or above: `low`, `medium`, `high`, `critical`.