Skip to content

fix(vulnerability): adapt API to v13s risk-tier model #452

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
ybelMekk wants to merge 15 commits into
base: main
Choose a base branch
from
Draft

fix(vulnerability): adapt API to v13s risk-tier model #452

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
749c23b
feat: add CVE priority levels to vulnerability GraphQL API and issue …
ybelMekk May 25, 2026
531eb33
feat(vulnerability): expose CVE priority, EPSS, KEV fields in GraphQL…
ybelMekk May 28, 2026
6fbbfaf
chore: bump v13s to v0.0.0-20260528121134-739c7136ac8e (cve-priority …
ybelMekk May 28, 2026
7ad3ba3
refactor: simplify toWorkloadVulnerabilitySummary — v13s now zeroes c…
ybelMekk May 28, 2026
dd0729e
fix: resolve leftover go.mod/go.sum conflict markers
ybelMekk Jun 2, 2026
058e2a7
fix: address gosec int32 cast and update issue expectation
ybelMekk Jun 2, 2026
89368f0
chore(deps): bump v13s api to af9d5e6
ybelMekk Jun 2, 2026
228161a
fix(vulnerability): adapt API to v13s risk-tier model
ybelMekk Jun 2, 2026
7b6aa5d
test(vulnerability): cover CVE risk-tier derivation
ybelMekk Jun 2, 2026
8de35a9
feat(vulnerability): expose fixVersion on image vulnerabilities
ybelMekk Jun 2, 2026
3a773f3
fix(vulnerability): handle RISK_TIER_UNSPECIFIED in risk-tier mapping
ybelMekk Jun 3, 2026
c341041
feat(vulnerability): expose KEV and EPSS fields on ImageVulnerability
ybelMekk Jun 3, 2026
ec24e2e
fix(vulnerability): map PRIORITY sort to cve priority order
ybelMekk Jun 3, 2026
957c6bf
chore(deps): bump v13s api after exploitable removal
ybelMekk Jun 4, 2026
3d8ae28
fix(vulnerability): clean enum docs and normalize fake EPSS percentile
ybelMekk Jun 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ require (
github.com/nais/pgrator/pkg/api v0.0.0-20260219115817-cf954d58c04e
github.com/nais/tester v0.1.1
github.com/nais/unleasherator v0.0.0-20251216221129-efebc54203fe
github.com/nais/v13s/pkg/api v0.0.0-20260528080657-d4f49e5737da
github.com/nais/v13s/pkg/api v0.0.0-20260604080807-5ff2f400c716
github.com/patrickmn/go-cache v2.1.0+incompatible
github.com/pressly/goose/v3 v3.27.0
github.com/prometheus/client_golang v1.23.2
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -813,8 +813,8 @@ github.com/nais/tester v0.1.1 h1:tpJ5HKpu3mEIWX/mec0Yj0xLHEpt+MwTAsj282n0Py0=
github.com/nais/tester v0.1.1/go.mod h1:NCQMcgftHz/EXorob1XwDTOqkQmImDqr51YQ2Uea9Pc=
github.com/nais/unleasherator v0.0.0-20251216221129-efebc54203fe h1:CdRVopOihru4tXVwKZjhg6C8SbPLCQYOhJKpjBZYhjg=
github.com/nais/unleasherator v0.0.0-20251216221129-efebc54203fe/go.mod h1:Tiz/1If3WgcfvNhmsO5DiQC+L+1XhBG3KWbIfbjx4EU=
github.com/nais/v13s/pkg/api v0.0.0-20260528080657-d4f49e5737da h1:59leNz7qKRctGQS6xUnPzVUqa2NnEzVlwMDAWyhUwJs=
github.com/nais/v13s/pkg/api v0.0.0-20260528080657-d4f49e5737da/go.mod h1:KBuEYLBJOFM36G7D5RAZ5oRyUv0/IOK9JCgkUS1eqqY=
github.com/nais/v13s/pkg/api v0.0.0-20260604080807-5ff2f400c716 h1:FpEOQH7TP50xuVCkkcMk+ZaSRnxhmHZmuhDVPGL56sU=
github.com/nais/v13s/pkg/api v0.0.0-20260604080807-5ff2f400c716/go.mod h1:KBuEYLBJOFM36G7D5RAZ5oRyUv0/IOK9JCgkUS1eqqY=
github.com/ncruces/go-sqlite3 v0.32.0 h1:hNBUXp88LrfQCsuyXLqWTbTUG35sUuktDsqhhgHvU20=
github.com/ncruces/go-sqlite3 v0.32.0/go.mod h1:MIWTK60ONDl0oVY073zYvJP21C3Dly6P9bxVpgkLwdQ=
github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
Expand Down
4 changes: 2 additions & 2 deletions integration_tests/issues_for_team.lua
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -579,8 +579,8 @@ Test.gql("VulnerableImageIssue", function(t)
nodes = {
{
__typename = "VulnerableImageIssue",
message = "Image 'vulnerable-image' has 5 critical vulnerabilities and a risk score of 250",
severity = "WARNING",
message = "Image 'vulnerable-image' has 2 IMMEDIATE and 3 HIGH risk-tier vulnerabilities",
severity = "CRITICAL",
critical = 5,
riskScore = 250,
workload = {
Expand Down
322 changes: 322 additions & 0 deletions internal/graph/gengql/issues.generated.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading