Skip to content

Commit

Permalink
Correct vuln processing false positive cleanup timeout
Browse files Browse the repository at this point in the history
The timeout is hardcoded to 2x vulns job periodicity (default one hour). See http://github.com/fleetdm/fleet/blob/main/docs/Contributing/Vulnerability-processing.md#false-positive-cleanup for contributor docs on this.
  • Loading branch information
iansltx committed Feb 17, 2025
1 parent df3954b commit fa9bf81
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion articles/vulnerability-processing.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ Currently, only software names with all ASCII characters are supported. Vulnerab

For Ubuntu Linux, kernel vulnerabilities with known variants (ie. `-generic`) are detected using OVAL. Custom kernels (unknown variants) are detected using NVD.

If you find that Fleet is incorrectly marking software as vulnerable (false positive) or missing a vulnerability (false negative), please file a [bug](https://github.com/fleetdm/fleet/issues/new?template=bug-report.md). When false positives are fixed, it may take an hour for the false positive to dissapear after upgrading Fleet.
If you find that Fleet is incorrectly marking software as vulnerable (false positive) or missing a vulnerability (false negative), please file a [bug](https://github.com/fleetdm/fleet/issues/new?template=bug-report.md). When false positives are fixed, it may take two hous for the false positive to disappear after upgrading Fleet.

## Sources

Expand Down

0 comments on commit fa9bf81

Please sign in to comment.