fix(ci): cap Syft heap inside DinD
Managed validation / Managed repository validation (pull_request) Successful in 2m39s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 2m49s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 31s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 7m31s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped

This commit is contained in:
Jens
2026-08-30 13:25:37 +02:00
parent aec584d433
commit 9f771a61cf
2 changed files with 9 additions and 4 deletions
+2
View File
@@ -123,6 +123,8 @@ def test_scanner_images_are_versioned_and_digest_pinned() -> None:
assert 'docker save "$IMAGE_ID"' in sbom
assert '"docker-archive:$WORKDIR/$IMAGE_ARCHIVE"' in sbom
assert 'SYFT_PARALLELISM=${SYFT_PARALLELISM:-1}' in sbom
assert 'GOMEMLIMIT=${SYFT_GOMEMLIMIT:-4GiB}' in sbom
assert 'GOGC=${SYFT_GOGC:-25}' in sbom
assert "--select-catalogers=-binary" in sbom
assert '--volumes-from "$HOSTNAME"' in sbom
assert 'ARCHIVE_ID_FILE="${IMAGE_ARCHIVE}.image-id"' in sbom