← Back to issue list

Add option to annotate resources, to enable vulnerability identification

View original Github issue

Metadata

Project
charmcraft
Number
#1912
Type
issue
State
open
Author
sed-i
Labels
Created
2024-09-20 03:42:54+00:00
Updated
2025-08-15 15:17:47+00:00
Closed

Current evaluation

No evaluation has been recorded for this issue yet.

Issue body

### What needs to get done When we run `charmcraft resource-revisions`, there should be an additional column, which users could utilize to indicate workload version. ### Why it needs to get done Currently, resource revisions are opaque, and there is no way to know, without deploying, which workload version is where: ``` $ charmcraft resource-revisions prometheus-k8s prometheus-image Revision Created at Size Architectures 151 2024-09-06T19:19:58Z 512B all 150 2024-08-23T08:46:48Z 512B amd64 149 2024-07-16T14:44:50Z 512B all ``` This poses a difficulty for vulnerability identification: we need to be able to generate a list of charm revisions that are affected by a certain CVE.

Evaluation history

No evaluation history available.