Verify listed CVEs in the release notes.

This code makes sure that CVEs listed in the release notes
do not exist in the released images.

BUG=b/297072262
TEST=Builds with different release notes in  https://cos-review.googlesource.com/c/cos/tools/+/56629
RELEASE_NOTE=none

Change-Id: Ia79d23e3cf2186a7057973c9b6d4fb6369f44620
Reviewed-on: https://cos-review.googlesource.com/c/cos/tools/+/56491
Tested-by: Anil Altinay <aaltinay@google.com>
Cloud-Build: GCB Service account <228075978874@cloudbuild.gserviceaccount.com>
Reviewed-by: Arnav Kansal <rnv@google.com>
3 files changed
tree: 825ad077138788aa24a6311cf381f80dafd9d7f1
  1. coverage/
  2. release/
  3. src/
  4. testing/
  5. .gitignore
  6. BUILD.bazel
  7. cloudbuild.yaml
  8. CONTRIBUTING.md
  9. deps.bzl
  10. go.mod
  11. go.sum
  12. LICENSE
  13. postsubmit-cloudbuild.yaml
  14. README.md
  15. run_tests.sh
  16. run_unit_tests.sh
  17. WORKSPACE
README.md

Tools for Container-Optimized OS

This is a repository of various tools developed for Container-Optimized OS. Examples include cos-gpu-installer, cos-toolbox, etc.

See CONTRIBUTING.md for how to contribute.