Addon no longer passes splunk cloud vetting

[sanjay900]

Looks like the vetting requirements have changed, and now the addon has had its cloud vetting status revoked. I am no longer able to install v2.0.17 or v2.0.16 on a cloud stack.

{
  "description": "Check that the static/ directory does not contains any subdirectories and contains only known file types. Ensure malicious files are not passed off as metadata files.",
  "name": "check_static_directory_file_allow_list",
  "tags": [
    "splunk_appinspect",
    "cloud"
  ],
  "result": "failure",
  "messages": [
    {
      "result": "failure",
      "message": "This file does not appear to be a png image or txt file. Please remove this file from the static directory. File: static/openapi.json",
      "message_filename": "static/openapi.json",
      "message_line": null
    }
  ]
},

[sanjay900]

Seems like the fix is to update splunk-add-on-ucc-framework

[guilhemmarchand]

Hi @sanjay900

My apologises, it was difficult lately to find time to maintain the app lately - I will update it today

[guilhemmarchand]

@sanjay900 Release 2.0.18 has been published today and should vetted.