Remediating container vulnerabilities

Monitoring remediation is a process that begins with reviewing status and ends with closing container vulnerable items (CVITs). Container Vulnerability Response offers tools and procedures to make that process more productive and efficient.

• Container Vulnerability Response calculator rules
  Vulnerability calculators automate the calculation of initial values for the fields on container vulnerable items. The condition for each calculator is evaluated in order, and the first matching calculator is used.
• Container Vulnerability Response assignment rules
  Define the criteria by which container vulnerable items are automatically assigned to an assignment group for remediation.
• Container Vulnerability Response remediation target rules
  Remediation target rules define the expected time frame for remediating a container vulnerable item (CVIT). These rules are similar to how SLAs provide a time frame for remediating the vulnerability itself.
• Exception management in Container Vulnerability Response
  When your organization can't comply with a published vulnerability management or security policy, standard, or guideline, you can request an exception. Exception management entails requesting, reviewing, approving, or rejecting exceptions to an container vulnerable item (CVIT) that cannot be remediated according to the policy.
• Container Vulnerability Response remediation tasks and task rules overview
  Configure remediation tasks (CVULs) to help analysts and remediation specialists organize container vulnerable items (CVIT) and analyze them in bulk. The criteria by which remediation tasks are formed are configured so that CVITs are automatically assigned into remediation tasks. Using remediation tasks, you can monitor progress and drive the remediation process more efficiently.
• Close a remediation task
  If you determine that the issue associated with an application remediation task can be immediately closed without further analysis, you can use the Close feature. Starting with v2.10 of Container Vulnerability Response, the Close button has been removed for an container remediation task.
• IT Operations Management and pattern discovery
  When discovery is enabled, information is received from the Information Technology Operations Management (ITOM) team. If the ITOM Discovery is enabled, you can see Kubernetes Namespaces, Kubernetes Clusters, and Kubernetes Services when you open a container vulnerable item (CVIT). Else, you can see Prisma payload information.