Skip to content

Resolve affected range

Fabien Catteau requested to merge 14630-resolve-affected-range into 14630-use-gemnasium-db

What does this MR do?

Filter advisories and compare to dependency versions using the affected range. Versions and version ranges are evaluated in the syntax that correspond to the type of the affected package.

This branch vendors vrange CLI binaries from the gemnasium/semver project, see https://gitlab.com/gitlab-org/security-products/gemnasium/semver/merge_requests/3.

What are the relevant issue numbers?

gitlab-org/gitlab#14630 (closed)

Edited by 🤖 GitLab Bot 🤖

Merge request reports