Justifier.py integration with VAT
This template is ONLY used for enhancement requests. Bug reporting or new feature request issues should use the other template options for issue submission.
Current Behavior
Justifier.py uses .greylist files for gathering findings that are inherited or already have justifications.
Purpose
Update justifier.py to use the VAT db to gather inherited and justified findings.
Plan
-
Get updated query from Irma -
Update Jusitifer.py to collect inherited and justified findings from VAT for the all_scans.xlsx spreadsheet -
Test -
No parent image -
At least one parent image
-
-
Open additional tickets -
Only do one VAT db query in the pipeline, export results as an artifact -
Only access hardening manifest for source and parent image names and versions once, source/parent images created as env var string (comma delimited)
-
Acceptance Criteria
- Justifier.py only uses the VAT for inherited and justified CVEs.
Edited by Kenneth Maguire