You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description:
This issue reports a limitation in the Harbor UI's CVE (Common Vulnerabilities and Exposures) view when handling fix information for rescanned images.
Current Behavior:
When an image is scanned for vulnerabilities, the "fixed in version" column in the Harbor UI initially shows an empty value for newly discovered vulnerabilities. This is expected behavior.
If the scanner subsequently identifies fix versions for these vulnerabilities and transmits this information during a rescan, the Harbor UI does not update the "fixed in version" column. It continues to display the empty value.
Expected Behavior:
The Harbor UI should update the "fixed in version" column with the newly available fix information whenever a rescan reveals such data for previously identified vulnerabilities.
Impact:
This limitation prevents users from seeing the most up-to-date vulnerability information for their images, potentially leading to inaccurate assessments of their security posture.
Possible Cause:
Based on internal investigation, the issue likely stems from Harbor caching scanned image data in its database. When an image is rescanned, Harbor might retrieve the cached data instead of querying the latest information.
Proposed Solution:
Investigate and implement mechanisms within Harbor to ensure the UI retrieves and displays the latest fix information during rescans, even for previously scanned images.
The text was updated successfully, but these errors were encountered:
Sopuru
changed the title
Harbor/Anchore Enterprise Integration - Missing Fix Details in Harbor
Harbor Integration - Missing Fix Details in Harbor
Jan 24, 2025
Sopuru
changed the title
Harbor Integration - Missing Fix Details in Harbor
Harbor UI: Fix information not updated for rescanned images with newly available fixes (CVE data)
Jan 25, 2025
Description:
This issue reports a limitation in the Harbor UI's CVE (Common Vulnerabilities and Exposures) view when handling fix information for rescanned images.
Current Behavior:
When an image is scanned for vulnerabilities, the "fixed in version" column in the Harbor UI initially shows an empty value for newly discovered vulnerabilities. This is expected behavior.
If the scanner subsequently identifies fix versions for these vulnerabilities and transmits this information during a rescan, the Harbor UI does not update the "fixed in version" column. It continues to display the empty value.
Expected Behavior:
The Harbor UI should update the "fixed in version" column with the newly available fix information whenever a rescan reveals such data for previously identified vulnerabilities.
Impact:
This limitation prevents users from seeing the most up-to-date vulnerability information for their images, potentially leading to inaccurate assessments of their security posture.
Possible Cause:
Based on internal investigation, the issue likely stems from Harbor caching scanned image data in its database. When an image is rescanned, Harbor might retrieve the cached data instead of querying the latest information.
Proposed Solution:
Investigate and implement mechanisms within Harbor to ensure the UI retrieves and displays the latest fix information during rescans, even for previously scanned images.
The text was updated successfully, but these errors were encountered: