Map product/vendor for homebrew "pass" package, skip "jira" python package as it has no CVEs (#25626)

For #25597. Needs to be QA'd pre-merge /cc @jmwatts 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

This commit is contained in:

Ian Littman

2025-01-21 15:34:44 -06:00

committed by

GitHub

parent 1ad76c5253

commit 4792d0bf7b

4 changed files with 40 additions and 0 deletions

changes/25597-false-positives

View File

				`@@ -0,0 +1 @@`
				* Resolved false-positives for the `pass` Homebrew package and `jira` Python package via a vulnerability feed update available to all Fleet versions on 2025-01-22