UNCLASSIFIED - NO CUI

Fix unapproved, not inherited findings

This template is ONLY used for reporting bugs. New feature request or pipeline enhancement issues should use the other template options for issue submission.

Current Behavior

Unapproved, not inherited (i.e. Dockerfile) findings will show up as Inherited from base image if their justification isn't already approved. We have not heard from anyone that this is happening, but we can assume that it will happen after looking back at the code.

Live Example

Since we reverted #268 (closed), this issue is no longer resolved.

We did some initial work to solve this issue by reversing the whitelist generated in the csv-output stage, but realized that unapproved non-inherited Dockerfile findings will still show up as Inherited from base image in the justifications spreadsheet.

Expected Behavior

Dockerfile findings that are not approved should show as a yellow blank cell in anchore compliance.

Possible Solution

Create a list including the ids for Healthcheck and user root findings. While generating vat_findings.json, remove any base image findings that have an id in that list.

Edited by Kenneth Maguire