Skip to content

Instantly share code, notes, and snippets.

@arajkumar
Created September 30, 2020 10:59
Show Gist options
  • Save arajkumar/bfd8adb9619df4bdc819eb908b213a0b to your computer and use it in GitHub Desktop.
Save arajkumar/bfd8adb9619df4bdc819eb908b213a0b to your computer and use it in GitHub Desktop.
ImageManifestVuln obj with Clairv4, Snyk and Quay API changes
apiVersion: secscan.quay.redhat.com/v1alpha1
kind: ImageManifestVuln
metadata:
selfLink: >-
/apis/secscan.quay.redhat.com/v1alpha1/namespaces/quay-enterprise/imagemanifestvulns/sha256.cf785e739b3aeba8f7553b17560a4cd7d9b2a91ea9e453aa6fa5cb0b83e9ed2b
resourceVersion: '113932'
name: sha256.cf785e739b3aeba8f7553b17560a4cd7d9b2a91ea9e453aa6fa5cb0b83e9ed2b
uid: e1d548b6-2d13-427f-abba-c27b76e54c3e
creationTimestamp: '2020-09-30T10:54:23Z'
generation: 1
managedFields:
- apiVersion: secscan.quay.redhat.com/v1alpha1
fieldsType: FieldsV1
fieldsV1:
'f:metadata':
'f:labels':
.: {}
'f:quay-enterprise/ubuntu-deployment-5f79f4f87b-jfwgt': {}
'f:spec':
.: {}
'f:features': {}
'f:image': {}
'f:manifest': {}
'f:status':
.: {}
'f:affectedPods':
.: {}
'f:quay-enterprise/ubuntu-deployment-5f79f4f87b-jfwgt': {}
'f:fixableCount': {}
'f:highCount': {}
'f:highestSeverity': {}
'f:lastUpdate': {}
'f:unknownCount': {}
manager: security-labeller
operation: Update
time: '2020-09-30T10:54:23Z'
namespace: quay-enterprise
labels:
quay-enterprise/ubuntu-deployment-5f79f4f87b-jfwgt: 'true'
spec:
features:
- name: flask
version: '0.12'
vulnerabilities:
- description: Improper Input Validation
fixedby: 0.12.3
link: 'https://snyk.io/vuln/SNYK-PYTHON-FLASK-42185'
metadata: >-
{"UpdatedBy": "CodeReadyAnalytics", "RepoName": "pypi", "RepoLink":
"https://pypi.org/simple", "DistroName": null, "DistroVersion":
null}
name: SNYK-PYTHON-FLASK-42185
severity: High
- name: musl
version: 1.1.14-r15
vulnerabilities:
- fixedby: 1.1.14-r16
link: 'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15650'
metadata: >-
{"UpdatedBy": "alpine-main-v3.4-updater", "RepoName": null,
"RepoLink": null, "DistroName": "Alpine Linux", "DistroVersion": ""}
name: CVE-2017-15650
severity: Unknown
image: >-
quayecosystem-quay-quay-enterprise.apps.arajkuma-osa.devcluster.openshift.com/clairv4/flask
manifest: 'sha256:cf785e739b3aeba8f7553b17560a4cd7d9b2a91ea9e453aa6fa5cb0b83e9ed2b'
status:
affectedPods:
quay-enterprise/ubuntu-deployment-5f79f4f87b-jfwgt:
- 'cri-o://f601c30296b243988e96fefbd0407949d4262e9a376332d8e9c9e25f3ee6bcb8'
fixableCount: 2
highCount: 1
highestSeverity: High
lastUpdate: '2020-09-30 10:54:23.11967978 +0000 UTC'
unknownCount: 1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment