feat(vulnerability): adapt API to v13s vulnerability priority model#452

Open

ybelMekk wants to merge 36 commits into

mainfrom

feat/cve-priority

Commits on Jul 2, 2026

feat: add CVE priority levels to vulnerability GraphQL API and issue checker
ybelMekk
committed
feat(vulnerability): expose CVE priority, EPSS, KEV fields in GraphQL; fix ExternalIngressActNow resolver stubs; add priority sort fields
ybelMekk
committed
chore: bump v13s to v0.0.0-20260528121134-739c7136ac8e (cve-priority rebase onto main)
ybelMekk
committed
refactor: simplify toWorkloadVulnerabilitySummary — v13s now zeroes counts for terminal states
ybelMekk
committed
fix: address gosec int32 cast and update issue expectation
ybelMekk
committed
chore(deps): bump v13s api to af9d5e6
ybelMekk
committed
fix(vulnerability): adapt API to v13s risk-tier model
ybelMekk
committed
test(vulnerability): cover CVE risk-tier derivation
ybelMekk
committed
feat(vulnerability): expose fixVersion on image vulnerabilities
ybelMekk
committed
fix(vulnerability): handle RISK_TIER_UNSPECIFIED in risk-tier mapping
ybelMekk
committed
feat(vulnerability): expose KEV and EPSS fields on ImageVulnerability
ybelMekk
committed
fix(vulnerability): map PRIORITY sort to cve priority order
ybelMekk
committed
chore(deps): bump v13s api after exploitable removal
ybelMekk
committed
fix(vulnerability): clean enum docs and normalize fake EPSS percentile
ybelMekk
committed
feat(vulnerability): add ransomwareCount, highEpssCount, and topRiskTier to ImageVulnerabilitySummary
ybelMekk
committed
feat(vulnerability): add riskTier field to vulnerability summaries
ybelMekk
committed
chore(deps): bump v13s api
ybelMekk
committed
feat(vulnerability): align CVE priority with v13s priority
ybelMekk
committed
fix(vulnerability): remove legacy risk-tier fallback
ybelMekk
committed
fix(issue): only flag immediate vulnerabilities
ybelMekk
committed
test(vulnerability): remove outdated CVE priority derivation tests
ybelMekk
committed
feat(vulnerability): add riskTier field to vulnerability summaries
ybelMekk
committed
chore(deps): align v13s api with main
ybelMekk
committed
refactor(vulnerability): hard-remove priority summary extras
ybelMekk
committed
chore(deps): bump v13s api to latest main
ybelMekk
committed
fix(vulnerability): revert ingress class tests
ybelMekk
committed
refactor(vulnerability): rename CVE priority IMMEDIATE to ACT_NOW
ybelMekk
committed
fix(issue): replace immediate wording with ACT_NOW
ybelMekk
committed
refactor(vulnerability): rename riskTier to priority and remove highEpssCount
ybelMekk
committed
fix(vulnerability): update ACT_NOW wording to lowercase 'act_now' in messages
ybelMekk
committed
fix(vulnerability): deprecate ExternalIngressCriticalVulnerabilityIssue type and resolvers
ybelMekk
committed
refactor(vulnerability): clarify priority summary and urgent issue naming
ybelMekk
committed
chore: resolve dependency file conflicts after rebase
ybelMekk
committed
refactor(vulnerability): adjust formatting of deprecation annotations for clarity
ybelMekk
committed
refactor(vulnerability): improve formatting of deprecation annotations for consistency
ybelMekk
committed
refactor(vulnerability): enhance ordering enums and improve error handling in workload processing
ybelMekk
committed