Red Hat CVE Checker

PyPI release GitHub release (latest SemVer)

A tool to analyze vulnerability scanner reports against Red Hat's VEX (Vulnerability Exploitability eXchange) data to identify false positives, severity mismatches, and CVSS score discrepancies.

Features

  • Multi-Scanner Support: Parses exports from RHACS, Nessus, Qualys, Prisma Cloud, Trivy, Clair, Anchore, and Snyk
  • Red Hat VEX Integration: Compares findings against official Red Hat VEX data
  • False Positive Detection: Identifies CVEs that don't actually affect Red Hat software
  • Severity & CVSS Analysis: Highlights discrepancies between scanner and Red Hat ratings
  • OpenShift Analysis: Identifies OCP versions and shows upgrade recommendations
  • Product Lifecycle: Detects outdated or end-of-life Red Hat products
  • Validation Score: Provides an overall quality score for scanner reports
  • Dual Interface: CLI tool and web application
  • Container Ready: Deployable to Podman/Docker/OpenShift

Quick Start

Installation

Install rh-cve-checker from PyPI:

pip install rh-cve-checker

Or with uv as a standalone tool (no virtual environment needed):

uv tool install rh-cve-checker

Upgrade later with uv tool upgrade rh-cve-checker; remove with uv tool uninstall rh-cve-checker.

See Installation for development installs, Git-based installs, and optional dependencies.

Development install

For contributors, clone the repository and install in editable mode:

git clone https://github.com/vdanen/rh-cve-checker.git
cd rh-cve-checker
uv sync --all-extras

Or with pip in a virtual environment:

python3 -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate
pip install -e ".[dev]"

Basic Usage

# Analyze a scanner report
rh-cve-checker analyze scan_results.csv

# With lifecycle detection
rh-cve-checker analyze scan_results.csv --check-lifecycle

# Start web interface
rh-cve-checker serve

Then open http://localhost:32000 to upload and analyze reports interactively.

Example Output

╭─────────────────────────────────────╮
│ Red Hat CVE Checker Analysis Report │
╰─────────────────────────────────────╯

Validation Score: 95.5/100 - Excellent

                Analysis Summary                
┏━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━┳━━━━━━━━━━━━┓
┃ Metric                  ┃ Count ┃ Percentage ┃
┡━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━╇━━━━━━━━━━━━┩
│ Total Findings          │  5200 │       100% │
│ True Positives          │  5182 │      99.7% │
│ False Positives         │     0 │       0.0% │
│ Likely False Positives  │     9 │       0.2% │
└─────────────────────────┴───────┴────────────┘

Documentation

Document Description
Installation Detailed installation instructions
Usage Guide CLI commands and web interface
Deployment Container and OpenShift deployment
OpenShift Analysis OCP version detection and analysis
Lifecycle Detection Product lifecycle and AI detection
Validation Score How the scoring system works
Configuration Environment variables and settings
Development Contributing and project structure

Supported Scanners

Scanner Format Auto-Detection
Red Hat ACS (RHACS) CSV ✅
Tenable/Nessus CSV ✅
Qualys CSV ✅
Prisma Cloud CSV, JSON ✅
Trivy CSV, JSON ✅
Clair CSV, JSON ✅
Anchore CSV, JSON ✅
Snyk CSV, JSON ✅

License

Apache License 2.0

Related Links

Project links

Data verified by PyPI on Aug 22, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for vdanen from gravatar.com vdanen

Credits

Author: Vincent Danen

GitHub Statistics

Data verified by PyPI on Aug 22, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Copyright 2026 Vincent Danen)

Requires

Python >=3.11

Provides Extra

dev

Tags

cve vulnerability security vex red hat scanner

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

rh_cve_checker-0.2.2.1.tar.gz (188.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

rh_cve_checker-0.2.2.1-py3-none-any.whl (197.3 kB view details)

Uploaded Python 3

File details

Details for the file rh_cve_checker-0.2.2.1.tar.gz.

File metadata

  • Download URL: rh_cve_checker-0.2.2.1.tar.gz
  • Upload date:
  • Size: 188.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for rh_cve_checker-0.2.2.1.tar.gz
Algorithm Hash digest
SHA256 d7768443dda192df834e42e615090455990a13ee33e9299375b92984ba4a5aaf
MD5 a62d79725b84284d6a191e2fe9ad89fa
BLAKE2b-256 dc8ab1fc6a5986b846e1ea88e5ae7dc4d0e3fbcd565a04dfdc279a949a0ea8f0

See more details on using hashes here.

Provenance

The following attestation bundles were made for rh_cve_checker-0.2.2.1.tar.gz:

Publisher: release.yml on vdanen/rh-cve-checker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file rh_cve_checker-0.2.2.1-py3-none-any.whl.

File metadata

File hashes

Hashes for rh_cve_checker-0.2.2.1-py3-none-any.whl
Algorithm Hash digest
SHA256 91bf3370e62b863f13c837a40fcba12d2cf3130acd0bda0d6962b062b9721a9c
MD5 22243c1c28d49adfaac92dccbee72bf6
BLAKE2b-256 d2b6aef4da0abd7ca30e87d0c4e3eca0f253331550bac1ad0606dd46f25c7a05

See more details on using hashes here.

Provenance

The following attestation bundles were made for rh_cve_checker-0.2.2.1-py3-none-any.whl:

Publisher: release.yml on vdanen/rh-cve-checker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.2.2.1 This release

2 files

0.2.2

2 files

0.2.1

2 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page