PaloAltoNetworks / PaloAltoNetworks/pan.dev

Issue/Help with "Get CI Image Vulnerability Policy"

Open
#406 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

documentation
Dominant language
MDX
Stars
78
Forks
88
Avg merge
5d 17h
Merged PRs (30d)
18

Description

Documentation link

https://pan.dev/prisma-cloud/api/cwpp/get-policies-vulnerability-ci-images/

Describe the problem

when using the following API:
/api/v30.01/policies/vulnerability/ci/images
for getting CI vulnerability rules for the images, I do not see rules[x]/condition/vulnerabilities array to be populated, it is always empty array:

"condition": {
                "readonly": false,
                "device": "",
                "vulnerabilities": []
            },

Path
rules[x]/condition/vulnerabilities

In the same time according to "Example (from schema)" on this page https://pan.dev/prisma-cloud/api/cwpp/get-policies-vulnerability-ci-images/ - this array should contain some information:

"condition": {
        "device": "string",
        "readonly": true,
        "vulnerabilities": [
          {
            "block": true,
            "id": 0
          }
        ]
},

Side notes: no such problem for /api/v30.01/policies/compliance/ci/images as vulnerabilities arrays are populated correctly

Could you please confirm if it is expected or an issue?

Suggested fix

include information about rules[x]/condition/vulnerabilities into response for /api/v30.01/policies/vulnerability/ci/images

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the linked Get CI Image Vulnerability Policy documentation and the response schema for /api/v30.01/policies/vulnerability/ci/images. Compare rules[x]/condition/vulnerabilities with the compliance CI images response, then confirm whether the empty array is expected or should be populated; the issue is done when the documented behavior and API response agree.

Written by the indexing model from the issue text.

Assessment

Domain
api, documentation
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.