anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities
Apache License 2.0
1.59k stars 272 forks source link

Fail to start if vulnerability provider is not explicitly configured #1251

Closed dspalmer99 closed 3 years ago

dspalmer99 commented 3 years ago

Engine should fail to start if vulnerability provider is not explicitly configured. This change is needed to prevent users starting the service via docker-compose, and upgrading to 3.2, from automatically changing their instance to the v2 provider. This change will require them to specifically configure which provider they want to use. The system will fail to start otherwise.

For this change, code needs to change in the following locations to not default to a provider.

Testing machinery also needs to change here: