chore: trivy, charts, veracode #26

drcgjung · 2023-08-24T10:22:55Z

WHAT

SNAPSHOT chart should be able to find SNAPSHOT or latest image
trivy step was disabled because docker manifest check requires a login
veracode brought 2 hints (informational, medium) for conforming agent
veracode did not correctly scan provisioning agent
veracode did not scan remoting agent at all (Setup Veracode Applications for Knowledge Agents sig-infra#237)

Could you please also start veracode manually after merge (and fixing eclipse-tractusx/sig-infra#237)? Big hug from me!

…n. login to docker when checking manifest before calling trivy

…abled.

…tern.

…on differently than a standalone app.

chore(workflows): add latest and SNAPSHOT tags when building from mai…

0181ee6

…n. login to docker when checking manifest before calling trivy

drcgjung requested review from scherersebastian and SebastianBezold August 24, 2023 10:23

drcgjung added 3 commits August 25, 2023 08:05

fix(conforming): VC-Flaw#1 CWE-611 external xml entity resolution dis…

670c662

…abled.

fix(conforming): VC-Flaw#3 CWE-404 use auto-close resource/reader pat…

efa11e6

…tern.

fix(provisioning): Veracode needs to deal with ontop/spring applicati…

5ecdb3f

…on differently than a standalone app.

drcgjung changed the title ~~chore: trivy, charts~~ chore: trivy, charts, veracode Aug 25, 2023

drcgjung marked this pull request as ready for review August 25, 2023 06:24

SebastianBezold approved these changes Aug 25, 2023

View reviewed changes

SebastianBezold merged commit 2ac3775 into eclipse-tractusx:main Aug 25, 2023
5 checks passed