Bug 1458678

Summary: [RFE] Support standard structured image scan annotation
Product: Red Hat CloudForms Management Engine Reporter: Federico Simoncelli <fsimonce>
Component: SmartState AnalysisAssignee: Rich Oliveri <roliveri>
Status: CLOSED CURRENTRELEASE QA Contact: brahmani
Severity: medium Docs Contact:
Priority: medium    
Version: 5.8.0CC: aweiteka, gblomqui, jhardy, lavenel, obarenbo
Target Milestone: GAKeywords: FutureFeature, TestOnly
Target Release: 5.10.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: container
Fixed In Version: 5.10.0.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1515438 (view as bug list) Environment:
Last Closed: 2018-06-21 20:26:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: Container Management Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1515438    

Description Federico Simoncelli 2017-06-05 08:15:56 UTC
Description of problem:
An openshift/origin upstream image annotation spec has landed upstream: https://docs.openshift.org/latest/security/container_content.html#security-integrate-external-scanners. This defines how external vulnerability scanners may add structured data to enable better UX and automation. Example CloudForms annotation:

Additional info:
https://github.com/ManageIQ/manageiq/issues/15212

Comment 4 Erez Freiberger 2017-11-20 14:27:28 UTC
These two PRs should implement this:
https://github.com/ManageIQ/manageiq/pull/15031
https://github.com/ManageIQ/manageiq-providers-openshift/pull/41