fedora-cve-triage - Man Page
A tool for triaging CVEs reported against Fedora components in Bugzilla
Synopsis
fedora-cve-triage [-v|--verbose] [-h|--help] [-V|--version] <subcommands>
Description
A tool for triaging CVEs reported against Fedora components in Bugzilla
Options
- -v, --verbose
Show progress details for rate-limited API queries
- -h, --help
Print help
- -V, --version
Print version
Commands
fedora-cve-triage config
fedora-cve-triage config [-v|--verbose] [-h|--help]
Set up or verify Bugzilla API key configuration
- -v, --verbose
Show progress details for rate-limited API queries
- -h, --help
Print help
fedora-cve-triage run
fedora-cve-triage run [-f|--config] [-v|--verbose] [-c|--component] [-a|--assignee] [-y|--yes] [--claim] [--skip-component] [-s|--status] [--check] [--apply] [--edit-bodhi] [-h|--help]
Apply every classifier to one bug population, in order
- -f, --config <CONFIG>
Path to TOML config file (default: run.toml in /etc/fedora-cve-triage/ merged under ~/.config/)
- -v, --verbose
Show progress details for rate-limited API queries
- -c, --component <NAME,...>
Limit run to these components (CSV or repeated)
- -a, --assignee <EMAIL,...>
Limit run to these assignees (CSV or repeated)
- -y, --yes
Answer yes to every prompt, skipping the per-bug review
- --claim
Reassign the bugs to your configured email without asking
- --skip-component <NAME,...>
Components to leave out (CSV or repeated)
- -s, --status <STATUS,...>
Bug statuses to sweep (CSV or repeated); overrides the config's `statuses`
- --check <NAME,...>
Checks to run, in order (CSV or repeated); overrides the config's `checks`
- --apply
Apply each check's changes (default: preview only)
- --edit-bodhi
Add bugs to testing updates (requires bodhi CLI)
- -h, --help
Print help
fedora-cve-triage search
fedora-cve-triage search <-p|--product> [-v|--verbose] [-c|--component] [-a|--assignee] [-s|--status] [-h|--help]
Search Bugzilla for CVE bugs
- -p, --product <PRODUCT>
Bugzilla product (e.g. "Security Response", "Fedora", "Fedora EPEL")
- -v, --verbose
Show progress details for rate-limited API queries
- -c, --component <COMPONENT>
Bugzilla component, typically the source RPM name (e.g. "vulnerability", "kernel")
- -a, --assignee <ASSIGNEE>
Filter bugs by assignee email address
- -s, --status <STATUS> [default: NEW]
Bug status filter
- -h, --help
Print help