Skip to content

Fix: Triage Y-stream CVEs when Z-stream clones are NOT_AFFECTED #792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
majamassarini wants to merge 6 commits into
base: main
Choose a base branch
from
+1,361 −22
Open

Fix: Triage Y-stream CVEs when Z-stream clones are NOT_AFFECTED #792

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
868db96
Fix: Triage Y-stream CVEs when Z-stream clones are NOT_AFFECTED
majamassarini Sep 1, 2026
18524f5
Add unit tests for Z-stream NOT_AFFECTED and pending-triage checks
majamassarini Sep 1, 2026
0ab6356
Fix: Filter Z-stream clones by module stream to prevent cross-contami…
majamassarini Sep 2, 2026
c23720f
Fix: Add missing dependencies and restore pipeline targets
majamassarini Sep 2, 2026
9ad48d3
Fix: Resolve rebase conflicts from upstream API changes
majamassarini Sep 3, 2026
9dc981a
Fix: Code review findings
majamassarini Sep 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions Containerfile.c10s
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,10 +80,11 @@ RUN pip3 install --no-cache-dir \
specfile \
pytest \
pytest-asyncio \
GitPython>=3.1.0 \
"GitPython>=3.1.0" \
unidiff \
PyYAML>=5.1 \
sentry-sdk>=2.13.0 \
"PyYAML>=5.1" \
"sentry-sdk>=2.13.0" \
typer \
&& cd /usr/local/lib/python3.12/site-packages \
&& patch -p5 -i /tmp/openinference-reasoning.patch \
&& patch -p5 -i /tmp/openinference-streaming.patch
Expand Down
7 changes: 4 additions & 3 deletions Containerfile.c9s
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,10 +83,11 @@ RUN python3.11 -m venv --system-site-packages /opt/beeai-venv \
redis \
specfile \
koji \
GitPython>=3.1.0 \
"GitPython>=3.1.0" \
unidiff \
PyYAML>=5.1 \
sentry-sdk>=2.13.0 \
"PyYAML>=5.1" \
"sentry-sdk>=2.13.0" \
typer \
&& cd /opt/beeai-venv/lib/python3.11/site-packages \
&& patch -p5 -i /tmp/openinference-reasoning.patch \
&& patch -p5 -i /tmp/openinference-streaming.patch
Expand Down
3 changes: 3 additions & 0 deletions Containerfile.supervisor
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ RUN update-ca-trust

RUN dnf -y install --allowerasing \
# Run time dependencies
git \
krb5-workstation \
python3 \
python3-backoff \
Expand All @@ -33,6 +34,8 @@ RUN dnf -y install --allowerasing \
arize-phoenix-otel \
redis \
specfile \
"sentry-sdk>=2.13.0" \
"GitPython>=3.1.0" \
&& dnf -y remove gcc gcc-c++ python3-devel \
&& dnf clean all

Expand Down
24 changes: 24 additions & 0 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -430,6 +430,30 @@ supervisor-collect:
$(COMPOSE_SUPERVISOR) run --rm \
supervisor python -m ymir.supervisor.main $(DEBUG_FLAG) collect --no-repeat

.PHONY: triage-issue
triage-issue:
@if [ -z "$(JIRA_ISSUE)" ]; then \
echo "Usage: make triage-issue JIRA_ISSUE=RHEL-12345 [DRY_RUN=true]"; \
exit 1; \
fi
$(COMPOSE_AGENTS) run --rm \
-e JIRA_ISSUE=$(JIRA_ISSUE) \
-e DRY_RUN=$(DRY_RUN) \
-e AUTO_CHAIN=false \
triage-agent

.PHONY: process
process:
@if [ -z "$(JIRA_ISSUE)" ]; then \
echo "Usage: make process JIRA_ISSUE=RHEL-12345 [DRY_RUN=true]"; \
exit 1; \
fi
$(COMPOSE_AGENTS) run --rm \
-e JIRA_ISSUE=$(JIRA_ISSUE) \
-e DRY_RUN=$(DRY_RUN) \
-e AUTO_CHAIN=true \
triage-agent

.PHONY: process-issue
process-issue:
$(COMPOSE_SUPERVISOR) run --rm \
Expand Down
Loading
Loading