Use VAT API for whitelist generation
This template is ONLY used for enhancement requests. Bug reporting or new feature request issues should use the other template options for issue submission.
Continued work from #267 (closed)
Current Behavior
The pipeline is querying the VAT directly to generate the set of whitelisted findings for each image.
Purpose
Update the stages in the pipeline that query that VAT directly to use the VAT api instead.
Plan
-
Update lint to get approval status from findings api -
Update lint to export api findings -
Update check-cves to use the api artifact -
Update csv-output to use the api artifact -
Test -
ubi8-minimal (single layer) -
kubecuddle (used for continual testing) -
java-code-evaluator (multi layer) -
base (distroless)
-
Acceptance Criteria
- All direct query code is removed
- The API is successfully implemented within the pipeline
- The finding API is only called once in the pipeline and its results are exported as an artifact
Edited by Kenneth Maguire