Remaining tasks for manifest generator
This is a tracker issue for what needs to be done on the manifest generator for @valentindavid.
Work was started here: https://gitlab.com/freedesktop-sdk/freedesktop-sdk/tree/valentindavid/experimental-manifest
-
Add ignored
andpatched
properties to list patched CVEs -
Handle renaming generated manifest when base already has one -
Add to bst-external (BuildStream/bst-external!60 (merged)) -
Add CI job to use it in 18.08 (!735 (merged))
The final generated manifest should look like:
{
"modules": [
{
"x-cpe": {
"product": "freeware_advanced_audio_decoder_2",
"version": "2.8.8",
"patches": ["CVE-2018-9999"],
"ignored": ["CVE-2017-9999"]
}
}
]
}
And the manifest renaming in flatpak-builder
behaves like this:
if a base runtime is used its manifest is renamed to manifest-base-1.json
where the number increments for bases on top of bases.
This is currently blocking #226 (closed), #212 (closed), #540 (closed)
Edited by Javier Jardón