Skip to content

Release v0.0.281

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jun 20:27
· 232 commits to main since this release
v0.0.281
fd58401
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

…nnotation

Overview

ValidateStatusAnnotation is an allowlist that rejects any kubescape.io/status
value not in the known set. This adds the new unsupported-schema value so
objects carrying it pass validation instead of being rejected with "invalid value".

Context: kubevuln will write a stub VulnerabilityManifestSummary annotated
kubescape.io/status: unsupported-schema for images whose registry serves a
manifest schema the scanner can't read. While VulnerabilityManifestSummary
itself isn't currently routed through this validator, adding the value here keeps
the shared status vocabulary consistent and future-proofs any object type that
is validated by it.

Changes

  • pkg/utils/validations.go: add helpers.UnsupportedSchema to the
    ValidateStatusAnnotation switch.
  • pkg/utils/validations_test.go: add a "valid status - unsupported schema" case.

Related issues/PRs

Depends on kubescape/k8s-interface#155 (defines helpers.UnsupportedSchema).
Bump k8s-interface to the release that includes it, then drop the temporary
local replace before merge.

Part of: kubescape/kubevuln#369

Checklist

  • Commits signed off (DCO)
  • Builds and tests pass locally (against the k8s-interface change)
Assets 2
Loading