{"action":"created","issue":{"url":"https://api.github.com/repos/ManageIQ/manageiq/issues/8097","repository_url":"https://api.github.com/repos/ManageIQ/manageiq","labels_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/8097/labels{/name}","comments_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/8097/comments","events_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/8097/events","html_url":"https://github.com/ManageIQ/manageiq/pull/8097","id":149504285,"number":8097,"title":"Handle new Container Image CVE content","user":{"login":"moolitayer","id":3010449,"avatar_url":"https://avatars.githubusercontent.com/u/3010449?v=3","gravatar_id":"","url":"https://api.github.com/users/moolitayer","html_url":"https://github.com/moolitayer","followers_url":"https://api.github.com/users/moolitayer/followers","following_url":"https://api.github.com/users/moolitayer/following{/other_user}","gists_url":"https://api.github.com/users/moolitayer/gists{/gist_id}","starred_url":"https://api.github.com/users/moolitayer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moolitayer/subscriptions","organizations_url":"https://api.github.com/users/moolitayer/orgs","repos_url":"https://api.github.com/users/moolitayer/repos","events_url":"https://api.github.com/users/moolitayer/events{/privacy}","received_events_url":"https://api.github.com/users/moolitayer/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ManageIQ/manageiq/labels/control","name":"control","color":"5319e7"},{"url":"https://api.github.com/repos/ManageIQ/manageiq/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/ManageIQ/manageiq/labels/events","name":"events","color":"5319e7"},{"url":"https://api.github.com/repos/ManageIQ/manageiq/labels/providers/containers","name":"providers/containers","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2016-04-19T15:56:10Z","updated_at":"2016-04-24T13:13:27Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/ManageIQ/manageiq/pulls/8097","html_url":"https://github.com/ManageIQ/manageiq/pull/8097","diff_url":"https://github.com/ManageIQ/manageiq/pull/8097.diff","patch_url":"https://github.com/ManageIQ/manageiq/pull/8097.patch"},"body":"This pr introduces an event and an action. Once a policy based on them is seeded we should have full OOTB support for the OpenSCAP integration. The action sequentially scans images to avoid overloading the provider\r\n"},"comment":{"url":"https://api.github.com/repos/ManageIQ/manageiq/issues/comments/213954415","html_url":"https://github.com/ManageIQ/manageiq/pull/8097#issuecomment-213954415","issue_url":"https://api.github.com/repos/ManageIQ/manageiq/issues/8097","id":213954415,"user":{"login":"moolitayer","id":3010449,"avatar_url":"https://avatars.githubusercontent.com/u/3010449?v=3","gravatar_id":"","url":"https://api.github.com/users/moolitayer","html_url":"https://github.com/moolitayer","followers_url":"https://api.github.com/users/moolitayer/followers","following_url":"https://api.github.com/users/moolitayer/following{/other_user}","gists_url":"https://api.github.com/users/moolitayer/gists{/gist_id}","starred_url":"https://api.github.com/users/moolitayer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moolitayer/subscriptions","organizations_url":"https://api.github.com/users/moolitayer/orgs","repos_url":"https://api.github.com/users/moolitayer/repos","events_url":"https://api.github.com/users/moolitayer/events{/privacy}","received_events_url":"https://api.github.com/users/moolitayer/received_events","type":"User","site_admin":false},"created_at":"2016-04-24T13:13:27Z","updated_at":"2016-04-24T13:13:27Z","body":"> @moolitayer ManageIQ allows tags to be created and added to many of the resources in the product. If you are just looking for a way to control if a container_manager should be scanned this seems like a lighter weight solution then all the policy wiring.\r\n> \r\n> I am not sure if we are using this approach in other places, but you can easily create a tag category and tag to determine if a container_manager should be scanned. Tags already get seeded so you would just need to define your new tag there and you could still keep the same logic you have with adding the tag (instead of policy) on creation. The tag can be applied directly to the provider.\r\n\r\nThere are two benefits I get from using policies for this:\r\n- A user can cancel all scans and auditing by removing the policy from the provider.\r\n- A user can create a custom policy by copying the existing in the control ui and changing it.\r\n\r\nAfter #7966 a default policy will get every container provider to\r\n- Scan all new images\r\n- Once a scan is complete, take actions (fail compliance, prevent from running at OpenShift) for certain results.\r\n\r\nI would like this piece to play along nice with the other two mentioned above however we decide to do it.\r\n\r\n> This would also get away from the odd event action of firing an event for a single container image than ends up processing all related container images.\r\n\r\nMy best response is https://github.com/ManageIQ/manageiq/pull/8097#issuecomment-212428635 but I do not know if it is good enough\r\n\r\n@gmcculloug @Fryguy @chessbyte Thoughts?"}}