Epic Goal

• The goal of this epic is to update our owned repos with security scans using SNYK and to update the insecure dependencies.

Why is this important?

• This is important because it can help use improve the overall security of shipped containers and pre-detect situations that would otherwise appear as emergency security fixes

Additional Context

• See https://groups.google.com/a/redhat.com/g/aos-devel/c/ZY5gdyqkr3c/m/LcBXVXbAEgAJ

Acceptance Criteria

• Security scans are enabled for following repos:
  • The storage driver: https://github.com/openshift/ibm-powervs-block-csi-driver
  • The operator that delivers the storage driver: https://github.com/openshift/ibm-powervs-block-csi-driver-operator
  • The cloud credential manager: https://github.com/openshift/cloud-provider-powervs/
  • And the machine api provider: https://github.com/openshift/machine-api-provider-powervs/
• Dependencies for each of the repos above are address for each of the versions of OpenShift we support where the containers are shipped.