search

kubernetes / sig-security

Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security
Apache License 2.0
161 stars 53 forks source link

CVE Feed: Add Prow job link as a metadata field #71

Closed PushkarJ closed 1 year ago

PushkarJ commented 1 year ago

Description

Freshness of a feed is dependent on successful scheduled prow job runs. Adding a link to job in the "json" feed and the markdown description, allows folks to look at the prow job to ensure that prow job has been running successfully as recent as few hours ago.

Details

Add a field named "prow job", under the custom map of _kubernetes.io at the top of the feed (not part of each CVE item) with single value being "https://testgrid.k8s.io/sig-security-cve-feed#auto-refreshing-official-cve-feed"

mtardy commented 1 year ago

/kind feature

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

mtardy commented 1 year ago

Add a field named "prow job", under the custom map of _kubernetes.io at the top of the feed (not part of each CVE item) with single value being "https://testgrid.k8s.io/sig-security-cve-feed#auto-refreshing-official-cve-feed"

Ah I was thinking that we wanted to link to the specific job that created the JSON itself, and I'm not sure we can do that simply. If it's just a hardcoded single value to the testgrid.k8s.io website, I guess it's fairly trivial! :)

/assign

mtardy commented 1 year ago

/remove-lifecycle stale

PushkarJ commented 1 year ago

/triage accepted /sig security docs /area security

k8s-ci-robot commented 1 year ago

@PushkarJ: The label(s) area/security cannot be applied, because the repository doesn't have them.

In response to [this](https://github.com/kubernetes/sig-security/issues/71#issuecomment-1480524005): >/triage accepted >/sig security docs >/area security Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.