Red Hat CVE Checker

PyPI release GitHub release (latest SemVer)

A tool to analyze vulnerability scanner reports against Red Hat's VEX (Vulnerability Exploitability eXchange) data to identify false positives, severity mismatches, and CVSS score discrepancies.

Features

  • Multi-Scanner Support: Parses exports from RHACS, Nessus, Qualys, Prisma Cloud, Trivy, Clair, Anchore, and Snyk
  • Red Hat VEX Integration: Compares findings against official Red Hat VEX data
  • False Positive Detection: Identifies CVEs that don't actually affect Red Hat software
  • Severity & CVSS Analysis: Highlights discrepancies between scanner and Red Hat ratings
  • OpenShift Analysis: Identifies OCP versions and shows upgrade recommendations
  • Product Lifecycle: Detects outdated or end-of-life Red Hat products
  • Validation Score: Provides an overall quality score for scanner reports
  • Dual Interface: CLI tool and web application
  • Container Ready: Deployable to Podman/Docker/OpenShift

Quick Start

Installation

Install rh-cve-checker from PyPI:

pip install rh-cve-checker

Or with uv as a standalone tool (no virtual environment needed):

uv tool install rh-cve-checker

Upgrade later with uv tool upgrade rh-cve-checker; remove with uv tool uninstall rh-cve-checker.

See Installation for development installs, Git-based installs, and optional dependencies.

Development install

For contributors, clone the repository and install in editable mode:

git clone https://github.com/vdanen/rh-cve-checker.git
cd rh-cve-checker
uv sync --all-extras

Or with pip in a virtual environment:

python3 -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate
pip install -e ".[dev]"

Basic Usage

# Analyze a scanner report
rh-cve-checker analyze scan_results.csv

# With lifecycle detection
rh-cve-checker analyze scan_results.csv --check-lifecycle

# Start web interface
rh-cve-checker serve

Then open http://localhost:32000 to upload and analyze reports interactively.

Example Output

╭─────────────────────────────────────╮
│ Red Hat CVE Checker Analysis Report │
╰─────────────────────────────────────╯

Validation Score: 95.5/100 - Excellent

                Analysis Summary                
┏━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━┳━━━━━━━━━━━━┓
┃ Metric                  ┃ Count ┃ Percentage ┃
┡━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━╇━━━━━━━━━━━━┩
│ Total Findings          │  5200 │       100% │
│ True Positives          │  5182 │      99.7% │
│ False Positives         │     0 │       0.0% │
│ Likely False Positives  │     9 │       0.2% │
└─────────────────────────┴───────┴────────────┘

Documentation

Document Description
Installation Detailed installation instructions
Usage Guide CLI commands and web interface
Deployment Container and OpenShift deployment
OpenShift Analysis OCP version detection and analysis
Lifecycle Detection Product lifecycle and AI detection
Validation Score How the scoring system works
Configuration Environment variables and settings
Development Contributing and project structure

Supported Scanners

Scanner Format Auto-Detection
Red Hat ACS (RHACS) CSV ✅
Tenable/Nessus CSV ✅
Qualys CSV ✅
Prisma Cloud CSV, JSON ✅
Trivy CSV, JSON ✅
Clair CSV, JSON ✅
Anchore CSV, JSON ✅
Snyk CSV, JSON ✅

License

Apache License 2.0

Related Links

Project links

Data verified by PyPI on Aug 22, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.2.2.1)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for vdanen from gravatar.com vdanen

Credits

Author: Red Hat Security

GitHub Statistics

Data verified by PyPI on Aug 22, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Copyright 2026 Red Hat Security)

Requires

Python >=3.11

Provides Extra

dev

Tags

cve vulnerability security vex red hat scanner

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

rh_cve_checker-0.2.2.tar.gz (188.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

rh_cve_checker-0.2.2-py3-none-any.whl (197.2 kB view details)

Uploaded Python 3

File details

Details for the file rh_cve_checker-0.2.2.tar.gz.

File metadata

  • Download URL: rh_cve_checker-0.2.2.tar.gz
  • Upload date:
  • Size: 188.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for rh_cve_checker-0.2.2.tar.gz
Algorithm Hash digest
SHA256 85cbe9c2b0277ad14a66643b7849f9c1eda5367b89317cd5b24d266ca5a1bf09
MD5 174459ebf562a7f301eb83d27c4908ac
BLAKE2b-256 077e9e08b3bfa654ed1e747733abad58a5f5d8d955ffb055b30aa87399c76e84

See more details on using hashes here.

Provenance

The following attestation bundles were made for rh_cve_checker-0.2.2.tar.gz:

Publisher: release.yml on vdanen/rh-cve-checker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file rh_cve_checker-0.2.2-py3-none-any.whl.

File metadata

  • Download URL: rh_cve_checker-0.2.2-py3-none-any.whl
  • Upload date:
  • Size: 197.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for rh_cve_checker-0.2.2-py3-none-any.whl
Algorithm Hash digest
SHA256 f10a11935856fa52de40e2e0de3b7314036443640d837889221f5708183ab742
MD5 21f9c7071e9e40b4959ceb82e70a0048
BLAKE2b-256 8fcfe9372350458b83ee0d47815dea6b5db61f4159e565ca9a9ccd8cb89a9139

See more details on using hashes here.

Provenance

The following attestation bundles were made for rh_cve_checker-0.2.2-py3-none-any.whl:

Publisher: release.yml on vdanen/rh-cve-checker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.2.2.1

2 files

This release

0.2.2 This release

2 files

0.2.1

2 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page