add check-findings job to check-cves stage
Merge Request Description
Makes new-findings asynchronously executed on each pipeline instead of a monolithic process that runs each morning. Triggers ironbank-tools/robotnik with the projectfindings check
command and passes the CI_PROJECT_ID. Robotnik queries VAT and Gitlab to determine any outstanding unjustified findings and creates/updates the chore(findings)
project issue.
- VAT client updated to query the read-only public api endpoint
- Adds weight to each chore(findings) issue based on number of findings per new-findings#4 (closed)
Edited by David Freeman