UNCLASSIFIED - NO CUI

Fix spreadsheet Dockerfile finding inheritance issue

This template is ONLY used for reporting bugs. New feature request or pipeline enhancement issues should use the other template options for issue submission.

Current Behavior

Currently, the VAT frontend correctly displays uninherited Dockerfile findings correctly, but the justification spreadsheet is listing them as inherited.

Live Example

Weavenet justifications spreadsheet shows user root found as effective user as inherited

Expected Behavior

The spreadsheet should match the VAT such that Dockerfile findings are not listed as inherited.

Possible Solution

After querying the VAT for findings related to an image and its inherited images, remove any CVEs found in the base that are in the child image.

Edited by Kenneth Maguire