fix(ci): bound Syft binary cataloging
Managed validation / Managed repository validation (pull_request) Successful in 3m48s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 3m19s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 28s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 8m37s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped

This commit is contained in:
Jens
2026-08-30 11:06:46 +02:00
parent bcd023ec36
commit 11de6d0005
2 changed files with 6 additions and 0 deletions
+1
View File
@@ -123,6 +123,7 @@ def test_scanner_images_are_versioned_and_digest_pinned() -> None:
assert 'docker save "$IMAGE_ID"' in sbom
assert '"docker-archive:$WORKDIR/$IMAGE_ARCHIVE"' in sbom
assert 'SYFT_PARALLELISM=${SYFT_PARALLELISM:-1}' in sbom
assert "--select-catalogers=-binary" in sbom
assert '--volumes-from "$HOSTNAME"' in sbom
assert 'ARCHIVE_ID_FILE="${IMAGE_ARCHIVE}.image-id"' in sbom
assert "/var/run/docker.sock" not in sbom