NAME¶

wolfictl-advisory-validate - Validate the state of advisory data

SYNOPSIS¶

wolfictl advisory validate [flags]

DESCRIPTION¶

Validate the state of the advisory data.

This command examines all advisory documents to check the validity of the data.

It looks for issues like:

It also looks for issues in the changes introduced by the current state of the advisories repo, relative to a "base state" (such as the last known state of the upstream repo's main branch). For example, it will detect if an advisory was removed, which is not allowed.

Using distro auto-detection is the easiest way to run this command. It will automatically detect the distro you're running, and use the correct advisory repo URL and base hash to compare against.

If you want to run this command without distro auto-detection, you'll need to specify the following flags:

More information about these flags is shown in the documentation for each flag.

If any issues are found in the advisory data, the command will exit 1, and will print an error message that specifies where and how the data is invalid.

OPTIONS¶

--advisories-repo-base-hash=""
commit hash of the upstream repo to which the current state will be compared in the diff

-a, --advisories-repo-dir=""
directory containing the advisories repository

--advisories-repo-url=""
HTTPS URL of the upstream Git remote for the advisories repo

-d, --distro-repo-dir=""
directory containing the distro repository

-h, --help[=false]
help for validate

--no-distro-detection[=false]
do not attempt to auto-detect the distro

-p, --package=[]
packages to validate

-r, --package-repo-url=""
URL of the APK package repository

--skip-alias[=true]
skip alias completeness validation

--skip-diff[=false]
skip diff-based validations

--skip-existence[=false]
skip package configuration existence validation

OPTIONS INHERITED FROM PARENT COMMANDS¶

--log-level="WARN"
log level (e.g. debug, info, warn, error)

SEE ALSO¶

wolfictl-advisory(1), wolfictl-advisory-validate-fixes(1)