contributions/policies/ubi-versions.json at 1e82e6dfbe623254c8f336de73bd2ba8ec68edad · stackrox/contributions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
{
    "policies": [
        {
            "id": "53e1d1fb-bc1e-4ef3-98c3-8df0dd5679b8",
            "name": "UBI version compliance",
            "description": "All  images on the cluster using the Red Hat Universal Base Image (UBI) must use at least versions  8.5 or 9.3",
            "rationale": "Using an older UBI image potentially exposes the workload to additional vulnerabilities",
            "remediation": "Update the base image to at least UBI 8.5 or 9.3",
            "disabled": true,
            "categories": [
                "Package Management"
            ],
            "lifecycleStages": [
                "BUILD",
                "DEPLOY"
            ],
            "eventSource": "NOT_APPLICABLE",
            "exclusions": [
                {
                    "name": "",
                    "deployment": {
                        "name": "",
                        "scope": {
                            "cluster": "",
                            "namespace": "openshift-*",
                            "label": null
                        }
                    },
                    "image": null,
                    "expiration": null
                },
                {
                    "name": "",
                    "deployment": {
                        "name": "",
                        "scope": {
                            "cluster": "",
                            "namespace": "stackrox",
                            "label": null
                        }
                    },
                    "image": null,
                    "expiration": null
                }
            ],
            "scope": [],
            "severity": "MEDIUM_SEVERITY",
            "enforcementActions": [],
            "notifiers": [],
            "SORTName": "",
            "SORTLifecycleStage": "",
            "SORTEnforcement": false,
            "policyVersion": "1.1",
            "policySections": [
                {
                    "sectionName": "Rule 1",
                    "policyGroups": [
                        {
                            "fieldName": "Image Component",
                            "booleanOperator": "OR",
                            "negate": false,
                            "values": [
                                {
                                    "value": "redhat-release=8\\.[0-4]-[0-9]+(?:\\.[0-9]+)?\\.el8"
                                },
                                {
                                    "value": "redhat-release=9\\.[0-2]-[0-9]+(?:\\.[0-9]+)?\\.el9"
                                },
                                {
                                    "value": "redhat-release-server=7.*"
                                }
                            ]
                        }
                    ]
                }
            ],
            "mitreAttackVectors": [],
            "criteriaLocked": false,
            "mitreVectorsLocked": false,
            "isDefault": false,
            "source": "IMPERATIVE"
        }
    ]
}