Skip to content

Set finding name when advisory title is not specified

Yasha Rise requested to merge 452267-continuous-container-scanning-attempts-to-insert-findings-with-empty-name into master

What does this MR do and why?

In vulnerability scanning, if an advisory doesn't have a title, set the finding name to an informative message instead of leaving it empty.

Relates to Continuous Container Scanning attempts to inser... (#452267 - closed) • Yasha Rise • 17.4.

Steps to reproduce issue

  1. Attempt to run a CVS scan for the advisory with advisory_xid: CVE-2024-2886 and source_xid: trivy-db.
  2. Notice that the name attribute is empty in the resulting finding / finding maps.

Detailed instructions are found in a thread in the original issue.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

Related to #452267 (closed)

Edited by Yasha Rise

Merge request reports