Add software-stack CVE filters and alerts #2

Closed

nsaspy wants to merge 1 commit from feat/software-stack-alerts into master

nsaspy commented

2026-09-09 15:42:22 +00:00

Owner

Summary

add named Tek9-backed software stacks with vendor/product/version components
add reusable CVE filters with keyword and minimum CVSS constraints
add durable alert rules, match state, acknowledgements, and MATCHED/UPDATED/RESOLVED history
evaluate alerts atomically during CVE sync and re-evaluate when stack/filter definitions change
add CLI workflows, HTTP read endpoints, post-commit alert hooks, docs, and regression tests
bump CVE Hunt to 0.3.0

Validation

local commit tree exactly matches the published GitHub tree
static Lisp form balance passed across all tracked Lisp sources
no private Tek9 or raw LMDB API usage
full SBCL/LMDB and Nix validation runs in this PR CI

## Summary - add named Tek9-backed software stacks with vendor/product/version components - add reusable CVE filters with keyword and minimum CVSS constraints - add durable alert rules, match state, acknowledgements, and MATCHED/UPDATED/RESOLVED history - evaluate alerts atomically during CVE sync and re-evaluate when stack/filter definitions change - add CLI workflows, HTTP read endpoints, post-commit alert hooks, docs, and regression tests - bump CVE Hunt to 0.3.0 ## Validation - local commit tree exactly matches the published GitHub tree - static Lisp form balance passed across all tracked Lisp sources - no private Tek9 or raw LMDB API usage - full SBCL/LMDB and Nix validation runs in this PR CI

nsaspy added 1 commit

2026-09-09 15:42:22 +00:00