[ybelMekk]

No description provided.

[github-actions]

📝 Changelog preview

Below is a preview of the Changelog that will be added to the next release. Only commit messages that follow the Conventional Commits specification will be included in the Changelog.

v7.1.0 - 2026-10-23

Full Changelog: v7.0.3...v7.1.0

🚀 Features

• (vulnerability) Browse and search CVEs (467e180)
• (vulnerability) Add autocomplete for CVE command flags (2be1dca)

[Copilot]

🟢 Approval recommended

Static review found no blocking issues in command integration, pagination, or GraphQL contracts; tests were not executed.

No open issues 🎉

What changed in this PR

Adds global CVE discovery to the Nais CLI and enriches vulnerability search with risk signals and remediation details.

Changes:

• Adds vulns cves with priority filtering, sorting, fetch limits, and table or JSON output.
• Paginates affected-workload searches and includes priority, fix versions, and suppression details.
• Updates the generated GraphQL client and adds pagination, limit, and flag-completion tests.

File	Description
internal/​vulnerability/​vulnerability.go	Adds paginated workload lookup and richer CVE reports.
internal/​vulnerability/​search_test.go	Tests pagination before environment filtering and result mapping.
internal/​vulnerability/​command/​search.go	Displays risk signals and workload fix versions.
internal/​vulnerability/​command/​flag/​flag.go	Defines catalog flags and completion values.
internal/​vulnerability/​command/​cves.go	Implements the global CVE listing command.
internal/​vulnerability/​command/​completion_test.go	Tests catalog flag completion.
internal/​vulnerability/​command/​command.go	Registers the cves subcommand.
internal/​vulnerability/​catalog.go	Fetches and maps paginated CVE catalog results.
internal/​vulnerability/​catalog_test.go	Tests filtering, ordering, pagination, cursor errors, and limits.
internal/​naisapi/​gql/​generated.go	Adds generated types and queries for catalog and search support.

_{Review effort: Balanced}