Review ACS reports for OrgBook BC namespace

[WadeBarnes]

We received a request from the security folks to review the ACS reports for the OrgBook BC namespace. They'd like us to respond with a remediation plan by Thursday May 23rd.

[WadeBarnes]

I've addressed the concerns with the search-engine and api images by rebuilding with updated base images. The api build also includes the changes in bcgov/aries-vcr v1.10.1.

ACS is reporting vulnerabilities inconsistently and there are a number of false positives left behind following this work. I've reported it to the Security, Platform, and RedHat folks. It's a huge waste of everyone's time if things are not accurate and consistent.

[WadeBarnes]

This ticket is blocking us from completing the work; bcgov/aries-vcr#766

[swcurran]

ACS?

[WadeBarnes]

RedHat Advanced Cluster Security