Abstract: A vulnerability with respect to a file in a continuous integration (CI) pipeline can be suppressed according to some aspects described herein. For example, a computing system can determine that the vulnerability is suppressible. In response to determining the vulnerability is suppressible, the computing system can automatically adjust a status of the vulnerability from an observed state that prevents deployment of the file to a suppressed state that allows the deployment of the file. The computing system additionally can determine a security risk of deploying the file. The suppressed state of the vulnerability can exclude the vulnerability from the determination of the security risk. The computing system can deploy the file in the CI pipeline subsequent to automatically adjusting the status of the vulnerability to the suppressed state.

Abstract: A vulnerability with respect to an image file in a continuous integration (CI) pipeline can be suppressed according to some aspects described herein. For example, a processor can receive an alert for the vulnerability with the CI pipeline being able to block deployment of the image file in response to the alert. Based on the alert, the processor can determine that the vulnerability of the image file is deferrable. After determining that the vulnerability is deferrable, the processor can automatically adjust a status of the vulnerability from an observed state to a deferred state. The CI pipeline can allow the deployment of the image file based on the status of the vulnerability being in the deferred state. The processor can deploy the image file in the CI pipeline after adjusting the status of the vulnerability to the deferred state.

Abstract: A vulnerability with respect to an image file in a continuous integration (CI) pipeline can be suppressed according to some aspects described herein. For example, a processor can receive an alert for the vulnerability with the CI pipeline being able to block deployment of the image file in response to the alert. Based on the alert, the processor can determine that the vulnerability of the image file is deferrable. After determining that the vulnerability is deferrable, the processor can automatically adjust a status of the vulnerability from an observed state to a deferred state. The CI pipeline can allow the deployment of the image file based on the status of the vulnerability being in the deferred state. The processor can deploy the image file in the CI pipeline after adjusting the status of the vulnerability to the deferred state.