gitlab-runner-helper new findings

Summary

Container has new findings discovered during continuous monitoring.

Definition of Done

Justifications:

• All findings have been justified
• Justifications have been provided to the container hardening team

Approval Process:

• Findings Approver has reviewed and approved all justifications
• Approval request has been sent to Authorizing Official
• Approval request has been processed by Authorizing Official

/cc @ironbank-notifications/security

added ContainerNew Findings OwnerIronbank PRIORITY0 labels

marked this issue as related to #4 (closed)

assigned to @yalabe.dukuly

added 1 deleted label

need to verify satellite server has been updated recently:

VAT > gitlab-runner-helper:v13.2.2 > OpenSCAP > RHSA-2021:0557

• dnf update is used in the Dockerfile
• RH claims the issue was patched

RH backported the fix in perl-5.26.3-417.el8_3 which is installed.

gitlab-runner-helper_v13.9.0-184705-justifications.xlsx

added 1 deleted label and removed 1 deleted label

assigned to @sean.melissari

mentioned in issue #5 (closed)

mentioned in issue #4 (closed)

assigned to @andymaks

added 1 deleted label

marked the checklist item All findings have been justified as completed

marked the checklist item Justifications have been provided to the container hardening team as completed

marked the checklist item Findings Approver has reviewed and approved all justifications as completed

marked the checklist item Approval request has been sent to Authorizing Official as completed

removed 1 deleted label

added 1 deleted label

marked the checklist item Approval request has been processed by Authorizing Official as completed

closed