UNCLASSIFIED - NO CUI

Xray-analysis, Incorrect image name in hardening manifest

Summary

Requesting application be updated.

'jfrog-xray' was missing in the repository name in hardening_manifest.yaml

Repository name was incorrect: name: "jfrog/xray-analysis" The image was pushed with the wrong name to registry1: registry1.dso.mil/ironbank/jfrog/xray-analysis:3.30.2

The issue is fixed, image needs to be pushed with the correct name.

Definition of Done

Hardening:

  • Container builds successfully
  • Container version has been updated in greylist file
  • Branch has been merged into development

No new findings:

  • There are no new findings in this update. Skip the Justifications and Approval Process steps and apply the label ~"Approval".

Justifications:

  • All findings have been justified per the above documentation
  • Justifications have been provided to the container hardening team

Approval Process:

  • Peer review from Container Hardening Team
  • Findings Approver has reviewed and approved all justifications
  • Approval request has been sent to Authorizing Official
  • Approval request has been processed by Authorizing Official
Edited by sean.melissari