ROX-29531: include advisory in output

[RTann]

Description

[RTann]

@janisz would you be able to help me out here? I don't know how to update the stackrox.model, so I don't know how to use the newer fields. Thanks

[janisz]

@RTann it's described here https://github.com/stackrox/jenkins-plugin/blob/master/README.md#updating-api-schema
It assumes the updated schema is on the demo cluster but you can take it from your local build as well.

[RTann]

@RTann it's described here https://github.com/stackrox/jenkins-plugin/blob/master/README.md#updating-api-schema It assumes the updated schema is on the demo cluster but you can take it from your local build as well.

Thanks! I missed this README and only saw the other one

[RTann]

This was generated by going to <staging environment>/main/apidocs then pressing the Download button. From there, I went to https://www.geeksforgeeks.org/json-to-yaml-converter/ and copy/pasted the JSON into the converter and saved the output to this file

[RTann]

I also re-added the security stuff at the bottom of the file

[RTann]

Wondering if someone can help me test this. I can't seem to build locally. I haven't used Java in over 6 years, so I don't remember how to properly set this up 😄

[janisz]

Here you are a description how to run it: https://github.com/stackrox/jenkins-plugin?tab=readme-ov-file#setup
Or you can use ./mvnw hpi:run -Djetty.port=8090 to run jenkins with installed plugin. Run it from stackrox-container-image-scanner

[janisz]

I tested it with quay.io/openshifttest/nginx-alpine:latest and Jenkins 2.395 and Stackrox v4.8.0

COMPONENT,VERSION,CVE,SEVERITY,FIXABLE,CVSS SCORE,SCORE TYPE,LINK,ADVISORY,ADVISORY LINK
libcrypto1.1,1.1.1l-r0,CVE-2022-0778,IMPORTANT,true,7.5,V3,https://nvd.nist.gov/vuln/detail/CVE-2022-0778,-,-
libcrypto1.1,1.1.1l-r0,CVE-2023-0464,IMPORTANT,true,7.5,V3,https://nvd.nist.gov/vuln/detail/CVE-2023-0464,-,-
libcrypto1.1,1.1.1l-r0,CVE-2023-0215,IMPORTANT,true,7.5,V3,https://nvd.nist.gov/vuln/detail/CVE-2023-0215,-,-
libcrypto1.1,1.1.1l-r0,CVE-2022-4450,IMPORTANT,true,7.5,V3,https://nvd.nist.gov/vuln/detail/CVE-2022-4450,-,-
libcrypto1.1,1.1.1l-r0,CVE-2023-0286,IMPORTANT,true,7.4,V3,https://nvd.nist.gov/vuln/detail/CVE-2023-0286,-,-

You need to update js code to render new columns

jenkins-plugin/stackrox-container-image-scanner/src/main/webapp/js/renderTables.js

Line 1 in 5124135

function renderCVETable(tableId, cves) {

[janisz]

Added advisory to the table