anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities
Apache License 2.0
1.58k stars 271 forks source link

Fix broken policy engine tests for grype provider #1248

Closed zburstein closed 3 years ago

zburstein commented 3 years ago

Fixes broken vulnerability tests for grype provider by adding the test images via the api instead of adding data to catalog and ingressing into the policy engine directly. Since the images need to analyze as opposed to having the content already available for vulnerability scanner, this changes does add some overhead to the workflow.

nightfurys commented 3 years ago

Rebased with the head of main(master) and force pushed

zburstein commented 3 years ago

This failed because of the fixes made for alpine source matching and rpm epoch matching. I've updated the expected content with these changes now