fix(ci): bound Syft binary cataloging
Managed validation / Managed repository validation (pull_request) Successful in 3m48s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 3m19s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 28s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 8m37s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
Managed validation / Managed repository validation (pull_request) Successful in 3m48s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 3m19s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 28s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 8m37s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
This commit is contained in:
@@ -123,6 +123,7 @@ def test_scanner_images_are_versioned_and_digest_pinned() -> None:
|
||||
assert 'docker save "$IMAGE_ID"' in sbom
|
||||
assert '"docker-archive:$WORKDIR/$IMAGE_ARCHIVE"' in sbom
|
||||
assert 'SYFT_PARALLELISM=${SYFT_PARALLELISM:-1}' in sbom
|
||||
assert "--select-catalogers=-binary" in sbom
|
||||
assert '--volumes-from "$HOSTNAME"' in sbom
|
||||
assert 'ARCHIVE_ID_FILE="${IMAGE_ARCHIVE}.image-id"' in sbom
|
||||
assert "/var/run/docker.sock" not in sbom
|
||||
|
||||
Reference in New Issue
Block a user