Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Get an overview of the vulnerabilities of the bundle #17

Closed
DnPlas opened this issue Sep 23, 2024 · 3 comments
Closed

Get an overview of the vulnerabilities of the bundle #17

DnPlas opened this issue Sep 23, 2024 · 3 comments
Labels
enhancement New feature or request

Comments

@DnPlas
Copy link
Contributor

DnPlas commented Sep 23, 2024

Context

In order to have a list of vulnerabilities to work on, the team needs to scan and parse the vulnerability reports from the Scan images workflow.

NOTE: this task depends on #18

What needs to get done

  1. Get the latest available result of the Scan images report for MLflow 2.15
  2. Gather all the issues created automatically for the mlflow oci image (from the rock)

Definition of Done

The vulnerabilities of the rock are identified with Github issues

@DnPlas DnPlas added the enhancement New feature or request label Sep 23, 2024
Copy link

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/KF-6300.

This message was autogenerated

@DnPlas DnPlas transferred this issue from canonical/mlflow-operator Oct 1, 2024
Copy link

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/KF-6341.

This message was autogenerated

@DnPlas
Copy link
Contributor Author

DnPlas commented Oct 17, 2024

A spreadsheet (internal only, see the Jira ticket) has been generated with information about vulnerabilities. It's been approved by the security team. Closing this issue.

@DnPlas DnPlas closed this as completed Oct 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant