Skip to content
Commit b4e5e02a authored by Ross Burton's avatar Ross Burton Committed by Steve Sakoman
Browse files

cve-check: don't warn if a patch is remote



We don't make do_cve_check depend on do_unpack because that would be a
waste of time 99% of the time.  The compromise here is that we can't
scan remote patches for issues, but this isn't a problem so downgrade
the warning to a note.

Also move the check for CVEs in the filename before the local file check
so that even with remote patches, we still check for CVE references in
the name.

Signed-off-by: default avatarRoss Burton <ross.burton@arm.com>
Signed-off-by: default avatarRichard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0251cad6)
Signed-off-by: default avatarSteve Sakoman <steve@sakoman.com>
parent 4b449d5d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment