[ybelMekk]

Expose ImageVulnerability.imageName from v13s so the confirmation in nais/cli#845 can display the image, versioned package purl and CVE before suppression. Reuse the existing package field.

Additive read-only change across tenants. Suppression mutations, permissions and actor attribution remain unchanged. Deploy before the CLI change.

[Copilot]

🟡 Changes recommended

The integration test expects component 0 in all three rows, but the fixture produces a MEDIUM finding for component 1, so the second expected purl must be corrected to avoid test failure.

1 open issue

• Correct the expected package URL for the second finding · New

1 file not reviewed

• internal/graph/gengql/vulnerability.generated.go: Generated file

What changed in this PR

Exposes finding image names through the vulnerability GraphQL API so the CLI can display the image, package purl, and CVE before suppression. This is an additive, read-only change; suppression behavior and permissions remain unchanged.

Changes:

• Maps the upstream image name into ImageVulnerability and exposes it in GraphQL.
• Clarifies the existing package field’s description.
• Updates fake data, generated GraphQL code, and test coverage.

File	Description
internal/​vulnerability/​transform.go	Maps the upstream image name.
internal/​vulnerability/​transform_test.go	Tests image name and package preservation.
internal/​vulnerability/​models.go	Adds the image name model field.
internal/​vulnerability/​fake/​fakedata.go	Populates image names in fake findings.
internal/​graph/​schema/​vulnerability.graphqls	Exposes imageName and clarifies package documentation.
internal/​graph/​gengql/​vulnerability.generated.go	Adds generated field resolution.
internal/​graph/​gengql/​root_.generated.go	Updates generated schema and field wiring.
integration_tests/​vulnerabilities.lua	Adds image name and package assertions.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

No active review issues were identified for the read-only image-name addition.

No open issues 🎉

1 resolved since last review

• Correct the expected package URL for the second finding

1 file not reviewed

• internal/graph/gengql/vulnerability.generated.go: Generated file

_{Review effort: Balanced}