richardkhardy

The following assumption in the code is not true in any of the OpenShift deployments I have tried def findTagSha(OpenShiftClient client, String imageStreamName, String namespace) { ... // latest tag...

grype builds cpe string with incorrect vendor for local packages

1

**What happened**: grype sets the cpe string our locally developed mariadb package as `cpe:2.3:a:mariadb:mariadb:0.3.0-SNAPSHOT:*:*:*:*:*:*:*` and this causes false positives. It can be solved with an ignore rule, but I was...

totp config add --stdio name value always uses the $HOME/.totp-config.json file for me. I needed to change in root.go ``` if cmd.Flags().Lookup(optionStdio) != nil { if cfg.useStdio { ``` to...