For reference this was flagged on the security audit and we need to address it or remove it

This is interesting as openshift is a place where projects deploy their own apps, so shouldn't this ticket be created in fedora-infra ? (just a wild guess on who's using this openshift pod, based on 'fedora-infra' in the name).

That's bringing an interesting question though : who is responsible/accountable for applications deployed in openshift but not maintained by the team who deployed openshift

@dkirwan , @siddharthvipul1 : is there something that runs inside openshift for external projects to help with this ?

This is an instance that was provided to the Fedora infrastructure when we migrated our apps from our jenkins to cico to leverage the shared infrastructure and experience that you have running cico/jenkins.

It is not something Fedora-infra has an hand on or knows how to deal with.

From Red Hats standpoint it's within our teams control so it somewhat forces ownership on us to resolve. That being said we should have a policy to work with our community to ensure timely upgrades as the result of us not complying will be a forced shutdown from our side.

@pingou so do you know who to contact for this (not in our team then) ?

@pingou so do you know who to contact for this (not in our team then) ?

Who to contact for what? This is on our team.

Looks like this is a duplicate in the tracking system. The instance is running a version which is considered green. Think we can close this.