-
Feature Request
-
Resolution: Unresolved
-
Undefined
-
None
-
rhacs-4.7.0
-
None
-
None
-
Product / Portfolio Work
-
None
-
False
-
-
None
-
None
-
-
-
-
-
-
-
None
include Scan Time data in vulnerability reporting, as this is in the UI, and should also be in the vulnerability reporting with the excel sheet with cve information. Currently this has only this below columns:
These are the columns that are generated by default Cluster, Namespace, Deployment, Image, Component, CVE Fixable, CVE Fixed In Severity, CVSS Discovered At, Reference
Below are the reasons why the customer needs this information on the vulnerability report:
a. Including the scan time in the reporting will provide us with audit evidence showing that all images are being scanned within the mandated SLAs.
b. Scan times provide us with easy access to verify the data we are sending is current vulnerability data and not stale/inaccurate data
c. Scan times in the report provides us the ability to ensure there are no scanning issues, as we review the reports daily and would identify discrepancies immediately