PaloAltoNetworks / PaloAltoNetworks/pan.dev
Issue/Help with "Get CI Image Vulnerability Policy"
Nobody has claimed this yet.
- Dominant language
- MDX
- Stars
- 78
- Forks
- 88
- Avg merge
- 5d 17h
- Merged PRs (30d)
- 18
Description
Documentation link
https://pan.dev/prisma-cloud/api/cwpp/get-policies-vulnerability-ci-images/
Describe the problem
when using the following API:
/api/v30.01/policies/vulnerability/ci/images
for getting CI vulnerability rules for the images, I do not see rules[x]/condition/vulnerabilities array to be populated, it is always empty array:
"condition": {
"readonly": false,
"device": "",
"vulnerabilities": []
},
Path
rules[x]/condition/vulnerabilities
In the same time according to "Example (from schema)" on this page https://pan.dev/prisma-cloud/api/cwpp/get-policies-vulnerability-ci-images/ - this array should contain some information:
"condition": {
"device": "string",
"readonly": true,
"vulnerabilities": [
{
"block": true,
"id": 0
}
]
},
Side notes: no such problem for /api/v30.01/policies/compliance/ci/images as vulnerabilities arrays are populated correctly
Could you please confirm if it is expected or an issue?
Suggested fix
include information about rules[x]/condition/vulnerabilities into response for /api/v30.01/policies/vulnerability/ci/images
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the linked Get CI Image Vulnerability Policy documentation and the response schema for /api/v30.01/policies/vulnerability/ci/images. Compare rules[x]/condition/vulnerabilities with the compliance CI images response, then confirm whether the empty array is expected or should be populated; the issue is done when the documented behavior and API response agree.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, documentation
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100