Sam Betts

Ensure eventlet SSL HTTPs contexts allow HTTP verify disabled

3

Monkey patched SSL context does not observe environment PYTHONHTTPSVERIFY=0 or PEP 493 settings Eventlet monkey patches the default SSL context and as a result circumvents the logic added to python's...

Carts is incompatible with mongo:latest image

2

After installing sock-shop on kubernetes using deploy/kubernetes/complete-demo.yaml the carts API endpoint fails and I see errors in the carts service logs. ``` 2022-09-02 09:54:31.652 ERROR [carts,,,] 7 --- [p-nio-80-exec-4] o.a.c.c.C.[.[.[/].[dispatcherServlet]...

Related CVE missing from report even though its in the DB

2

**What happened**: Grype detected a vulnerability from Amazon, ALAS-2023-2203, it has a known CVE ID:  However it is missing from the report's relatedVulnerabilities: ``` { "vulnerability": { "id": "ALAS-2023-2203",...

OData any operator is not working with primitive arrays

2

## Description When trying to filter using the any operator on a primitive (string) array it is not working and is returning an error. ## Expected Behavior API filters results...

AssetScan reconciler skips independent AssetScans because they have no Scan ID

2

## Description AssetScans were updated so that they could be used independently without being part of a batch of AssetScans managed by a Scan. In this case AssetScans will not...

VMClarity CLI

2

## Problem Statement As a user I would like to interact with VMClarity from the command line. This includes: * listing and searching assets * listing and searching findings *...

Switch generated API server code to "strict" mode.

1

Something I've had in my mind for a long time is switching our code generator to "strict mode". https://github.com/deepmap/oapi-codegen/tree/master#strict-server-generation In strict mode the rest controllers have to return a specific...

Scan now and Estimate now option from the Assets screen

3

## Problem Statement As a user I would like to be able to create an AssetScan for a specific Asset from the assets screen. This is useful when investigating an...

Implement a pattern for cascaded object deletion in VMClarity

2

## Problem Statement In VMClarity we have objects which form a relationship tree, for example ScanEstimation creates and manages a set of AssetScanEstimations. When we delete the ScanEstimation we expect...