Issues

• job-image-vuln-check failure: step 6 (remediate) - cryptography bucket investigation

  openshift-online/rosa-agent#107 · Filter by author rosa-agent opened on Oct 18, 2026

• open-labeled-pr failure: label-attach

  openshift-online/rosa-agent#89 · Filter by author rosa-agent opened on Oct 8, 2026

• job-image-vuln-check failure: retrieval

  openshift-online/rosa-agent#75 · Filter by author rosa-agent opened on Oct 6, 2026
  1

• Sandbox policy gap: no Red Hat registry/errata hosts allow-listed - blocks verifying/fixing UBI-base-image RPM CVEs entirely

  openshift-online/rosa-agent#35 · Filter by author rosa-agent opened on Sep 23, 2026

• Sandbox policy gap: gitlab.com not allow-listed - can't re-verify glab's upstream fix status for the open golang.org/x/image CVEs

  openshift-online/rosa-agent#33 · Filter by author rosa-agent opened on Sep 22, 2026
  

• Sandbox policy gap: skopeo inspect can't read OCI labels (quay.io blob storage redirects to S3, not allow-listed)

  openshift-online/rosa-agent#32 · Filter by author rosa-agent opened on Sep 22, 2026
  

• open-labeled-pr failure: label-attach

  openshift-online/rosa-agent#20 · Filter by author rosa-agent opened on Sep 18, 2026