← 输入框|github.com|刷新
Skip to content

🧪 Add Integration Tests for Trivy #623

Closed

Description

@J12934

The Trivy integration has currently no integration tests. This should be changed so that we can detect issues in the integration early and reliably.

The tests were initially skipped as trivy downloads it's database every time a scan gets executed (unless it's cached), which can lead to flaky test failures.
Ideally when adding the tests a good workaround for this issue can be identified which allows us to load the cache locally so that we don't have to rely on the network connection to the trivy cache service to work during the test.

If not such workaround can be found or is too timeconsuming, it would be ok to add these as is and rely on our existing jest retries to restart false positive test failures.

Activity

  1. added
    scannerImplement or update a security scanner
    testingImprovements or additions regarding the test setup
    ciChanges to the continuous integration setup
    on Sep 3, 2021
  2. nigthknight commented on Sep 14, 2021

    @nigthknight
    Member

    Trivy has an example explaining how to use Trivy on an Air-Gapped Environment

  3. self-assigned this
    on Sep 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

ciChanges to the continuous integration setupscannerImplement or update a security scannertestingImprovements or additions regarding the test setup

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions