Documentation on vulners cve (since old cve profile has been deprecated)

I am having trouble getting CVE scan data since the cve scan has been moved to vulners.py

Is there documentation on this? If so, I will look it over to see if I can figure out what is wrong.

If not here is the relevant data:

[root@hostname cve]# pwd
/srv/salt/hubblestack_data/hubblestack_nova_profiles/cve
[root@hostname cve]# cat vulners.yaml
vulners_scanner: True
vulners_api_key: <my key>

pwd; cat top.nova
/srv/salt/hubblestack_data/hubblestack_nova_profiles
# Default top.nova
#
# Subscribes to CIS, cve_scan, and misc.yaml for miscellaneous checks

nova:
  '*':
    #- security.meltdown_spectre
    - security.ssh_passwordauthentication
    #- cis.distribution-independent-linux-level-1-all-v1-1-0
    - vulners

Output from hubble audit:

hubble hubble.audit
{'Compliance': '0%',
 'Failure': [{'sshd-authenticationmethods-publickey': 'Check for explicitly configured publickey authentication method'},
             {'sshd-passwordauthentication-no': 'Ensure password authentication is disabled in sshd_config'}]}

Also, I would like to make sure the functionality in the previous scan to be able to use a local json file for CVE data was still supported.

[dgmorrisjr]

We have also been using hubble for disconnected servers and need to be able to download the datasource for offline scanning.

[basepi]

It’s feature-frozen here: https://github.com/hubblestack/hubble/tree/3.0

We’re currently testing and prepping, shooting for an official release by end of April, assuming no big issues.