RHACS is RH Security product that provides details around Vulnerabilities and Policy Violations. The tool found CVE fixes needed and Policy Violations with Cert-manager Operator 1.14. Attached are the results shared.
Goal of Spike:
1. Review the CVE fixes and determine which ones we will fix. For the ones we cannot, we need to provide explanation around why we can defer the fix.
2. Review Policy Violations and provide feedback on mitigation and reason to add these in exception management workflow.