DevSecOps Pipeline

In Openshift Pipelines :

• Click on “START
• Follow the pipeline’s progress

As you can see, the deployment went off without a hitch.

To find the CVE corresponding to the deployment, go to the RHACS dashboard and, more specifically, to the Violations section.

On the 1st line, you can see the pillow_policy that has blocked the deployment of our application (according to your namespace name). You can click on the policy for more details. This CVE concerns pillow, a python library for manipulating images. This CVE exists only on version 9.5.0 of pilow, but is no longer present on the most recent version.

To block new deployments :

Follow the steps below:

• Click on Platform Configuration
• Policy Management
• Click on the “Filter policies” search bar, and select “Policy”.
• Type “pillow_policy”, this is the policy that will block the deployment of our application.
• Click on the policy
• at top left, click on Actions, then edit policy.
• Go directly to section 2: Policy Behavior

In the “Response method” section, as above, “inform” is checked.

• Check “inform and enforce”.
• Click Next until you are prompted to save the policy.
• Save changes

Now go back to your pipeline and run it again.

As you can see, the application is not deployed on the cluster, as RHACS is blocking deployment.