Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Harbor UI: Fix information not updated for rescanned images with newly available fixes (CVE data) #21463

Open
Sopuru opened this issue Jan 24, 2025 · 0 comments

Comments

@Sopuru
Copy link

Sopuru commented Jan 24, 2025

Description:
This issue reports a limitation in the Harbor UI's CVE (Common Vulnerabilities and Exposures) view when handling fix information for rescanned images.

Current Behavior:
When an image is scanned for vulnerabilities, the "fixed in version" column in the Harbor UI initially shows an empty value for newly discovered vulnerabilities. This is expected behavior.
If the scanner subsequently identifies fix versions for these vulnerabilities and transmits this information during a rescan, the Harbor UI does not update the "fixed in version" column. It continues to display the empty value.

Expected Behavior:
The Harbor UI should update the "fixed in version" column with the newly available fix information whenever a rescan reveals such data for previously identified vulnerabilities.

Impact:
This limitation prevents users from seeing the most up-to-date vulnerability information for their images, potentially leading to inaccurate assessments of their security posture.

Possible Cause:
Based on internal investigation, the issue likely stems from Harbor caching scanned image data in its database. When an image is rescanned, Harbor might retrieve the cached data instead of querying the latest information.

Proposed Solution:
Investigate and implement mechanisms within Harbor to ensure the UI retrieves and displays the latest fix information during rescans, even for previously scanned images.

@Sopuru Sopuru changed the title Harbor/Anchore Enterprise Integration - Missing Fix Details in Harbor Harbor Integration - Missing Fix Details in Harbor Jan 24, 2025
@Sopuru Sopuru changed the title Harbor Integration - Missing Fix Details in Harbor Harbor UI: Fix information not updated for rescanned images with newly available fixes (CVE data) Jan 25, 2025
@reasonerjt reasonerjt self-assigned this Jan 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants