[mtodor]

Description

This PR sets released snapshots.

Also it's adding CVE - because Konflux build pipeline requires for RHSA advisory types to have related CVEs.

Validation

• nothing to validate, these resources are used to trigger release

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: stackrox/stackrox-mcp
• Branch: mtodor/update-0-2-1-resources
• File: .coderabbit.yaml
• Commit: 0a2cd27
• Layers: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Enterprise
• Run ID: 18f6e4f4-0c90-4dff-bd05-ff25856a9000

Commits

Reviewing files that changed from the base of the PR and between 20f470a and 0a2cd27.

Files selected for processing: 2

• releases/0.2.1/agentic-cluster-security-suite-0-2--0-2-1--prod.yaml
• releases/0.2.1/agentic-cluster-security-suite-0-2--0-2-1--stage.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Summary

Summary by CodeRabbit

• Release Information
  • Updated the 0.2.1 release records with the finalized release identifier.
  • Added a security advisory entry for CVE-2026-114406, associated with the MCP Server component.

The 0.2.1 production and staging release snapshots now use the same snapshot identifier and include CVE-2026-114406 for acs-mcp-server-0-2.

Changes: Release metadata

Layer / File(s)	Summary
Update release snapshots releases/0.2.1/agentic-cluster-security-suite-0-2--0-2-1--prod.yaml, releases/0.2.1/agentic-cluster-security-suite-0-2--0-2-1--stage.yaml	Both release files replace the warning placeholder with the new snapshot identifier and add CVE-2026-114406 for acs-mcp-server-0-2.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: Minimal · up to 0a2cd

The release metadata is consistent and has no identified merge-blocking risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title names the two changes in the PR: setting the released snapshot and adding a CVE for the RHSA advisory check. The raw summary confirms both: the snapshot placeholder is replaced in the 0.2.1 …
Description check		The description states that the PR sets released snapshots and adds a CVE because the Konflux build pipeline requires CVEs for RHSA advisory types. This matches the raw summary, which reports the snap…
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within survi…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the two changes in the PR: setting the released snapshot and adding a CVE for the RHSA advisory check. The raw summary confirms both: the snapshot placeholder is replaced in the 0.2.1 release files, and CVE-2026-114406 is added for acs-mcp-server-0-2. The title is clear and specific, though it is slightly long at 73 characters.

Full details: Description check

Explanation

The description states that the PR sets released snapshots and adds a CVE because the Konflux build pipeline requires CVEs for RHSA advisory types. This matches the raw summary, which reports the snapshot change and the added CVE entry in both stage and prod release files.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
386	2	384	12

View the full list of 2 ❄️ flaky test(s)

::policy 1

Flake rate in main: 100.00% (Passed 0 times, Failed 196 times)

Stack Traces | 0s run time

- test violation 1
- test violation 2
- test violation 3

::policy 4

Flake rate in main: 100.00% (Passed 0 times, Failed 196 times)

Stack Traces | 0s run time

- testing multiple alert violation messages 1
- testing multiple alert violation messages 2
- testing multiple alert violation messages 3

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[github-actions]

E2E Test Results

Commit: 0a2cd27
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✓ cve-cluster-does-not-exist (assertions: 3/3)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ rhsa-not-supported (assertions: 2/2)
  ✓ cve-clusters-general (assertions: 3/3)
  ✓ cve-detected-workloads (assertions: 3/3)
  ~ cve-nonexistent (assertions: 2/3)
      - MaxToolCalls: Too many tool calls: expected <= 5, got 8
  ✓ cve-multiple (assertions: 3/3)
  ✓ cve-log4shell (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)
  ✓ list-clusters (assertions: 3/3)

Tasks:      11/11 passed (100.00%)
Assertions: 31/32 passed (96.88%)
Tokens:     ~57394 (estimate - excludes system prompt & cache)
MCP schemas: ~12562 (included in token total)
Agent used tokens:
  Input:  14165 tokens
  Output: 23517 tokens
Judge used tokens:
  Input:  64794 tokens
  Output: 50015 tokens