Fix csvs and spreadsheet not showing inherited justifications as `Inherited from Base Image`
Looking at the response we get from the vat import endpoint, it appears that the endpoint isn't returning which image each justification comes from, so the pipeline isn't currently listing justifications that are inherited as Inherited from Base Image
. It also appears the the p1/containers
endpoint was updated to match the response returned from the import endpoint, so we're unable to get the container where the CVE was found.
To resolve this, we'll meet with CHT and security to see the priority of this feature, since we don't believe this will be a blocker for CHT devs and vendors. Based on the results of that discussion, we'll meet with VAT to discuss changes to the endpoint.
Edited by Kenneth Maguire