Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Handle shadowed gosu scan finding
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
Codex
2026-07-18 04:41:23 +02:00
parent 84cfe0d339
commit 0bd3934303
3 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/tests/test_rc6_supply_chain.py
+2
View File
@@ -67,6 +67,8 @@ def test_scanner_images_are_versioned_and_digest_pinned() -> None:
assert "--scanners vuln" in scan
assert '-v "$IGNORE_FILE:$CONTAINER_IGNORE_FILE:ro"' in scan
assert '--ignorefile "$CONTAINER_IGNORE_FILE"' in scan
assert "--skip-files /usr/local/bin/gosu" in scan
assert "final filesystem replaces it with the audited setpriv shell wrapper" in scan
assert "geointel-container-vulnerabilities.json" in scan