log that data is being modified

Signed-off-by: Will Murphy <[email protected]>
anchore · Jan 15, 2024 · 16ba565 · 16ba565
1 parent 48c7169
commit 16ba565
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/vunnel/providers/debian/parser.py b/src/vunnel/providers/debian/parser.py
@@ -354,6 +354,9 @@ def _normalize_json(self, ns_cve_dsalist=None):  # noqa: PLR0912,PLR0915,C901
                             # HACK: when we can represent per-package severity or have a good mechanism
                             # for overriding upstream data, we should take this out.
                             if vid == "CVE-2023-44487":
+                                self.logger.info(
+                                    "clearing severity on CVE-2023-44487, see https://github.com/anchore/grype-db/issues/108#issuecomment-1796301073",
+                                )
                                 vuln_record["Vulnerability"]["Severity"] = "Unknown"
 
                             # add fixedIn