Overview:

Few security issues seem to have been introduced through third-party libraries used in the ACS code. Some of these appears like real issues that can be resolved by updating the affected libraries.

• SAST Result Link: https://cov01.lab.eng.brq2.redhat.com/osh/task/966295/log/rhacs-collector-container-4.8.2-2/scan-results-imp.html
• Container Name: advanced-cluster-security/rhacs-collector-rhel8@sha256:edf106cdd912029966377e2037ae5465b13e21e923154f5499345422729a1940

Acceptance Criteria:

• Address issues by upgrading third-party libraries
• Or update https://gitlab.cee.redhat.com/osh/known-false-positives for false-positive issues

Review deadline:

• https://spaces.redhat.com/pages/viewpage.action?spaceKey=PRODSEC&title=Weakness+Management+Standard#WeaknessManagementStandard-4.ReviewDeadline&RequiredResolutionTargets