grafeas/kritis

Customizable vulnerability message

Open

#424 opened on Nov 25, 2019

View on GitHubContributor guide
 (1 comment) (1 reaction) (0 assignees)Go (135 forks)auto 404
enhancementgood first issuehelp wanted

Repository metrics

Stars
 (710 stars)
PR merge metrics
 (PR metrics pending)

Description

Is your feature request related to a problem? Please describe. The current message that is shown after a deployment fail is not really clear and easy to follow in terms of what steps need to be taken to take care of the CVEs. We have a deployment tool that are teams see the output of our admissions controller. It's important for them to understand what to do, and are sometimes confused by its output.

Example: [22:02:49] JobExecution failed: Kubernetes error buddhy-botkit-bot internaltools Internal Tools (Staging USE1): admission webhook "kritis-validation-hook-deployments.grafeas.io" denied the request: found violations in <image-link>

Describe the solution you'd like A configuration option that allows you to override this output message.

Contributor guide

Research direction
Study the existing violation message handling and add a configuration field to override the denial message.
Tech stack
go
Domain
backendinfrastructuresecurity
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GoKubernetesGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60