Pacemaker Configuration System
d481cdbcd2
This should help ProdSec accurately detect versions of bundled components in pcs. Security analysts usually filter the database based on ecosystem. The ecosystem detection has been done from RPM metadata for some time and that is when ProdSec stopped creating trackers accurately. The problem is that we didn't follow the Fedora Packaging Guidelines and didn't name the bundled components with package names as if they were entering Fedora. The ecosystem detection in Deptopia (the tool that ProdSec uses) expects "rubygem-" prefix for rubygems and "python[X]-" prefix for Python ecosystem. See PSDEVOPS-4408 for more details. |
||
|---|---|---|
| .fmf | ||
| tests | ||
| .gitignore | ||
| do-not-require-wheel.patch | ||
| do-not-support-cluster-setup-with-udp-u-transport.patch | ||
| gating.yaml | ||
| pcs.spec | ||
| plan-gating.fmf | ||
| rpminspect.yaml | ||
| show-info-page-instead-of-webui.patch | ||
| sources | ||