search

anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities
Apache License 2.0
1.58k stars 271 forks source link

Merge v1.0.1 into master #1295

Closed zburstein closed 2 years ago

zburstein commented 2 years ago

Merge v1.0.1 into master

zburstein commented 2 years ago

I believe that the PR is showing the rc_image_workflow because the head to this branch has rc tags. Just a note that it has failed because there exists a high severity vuln in engine that is a part of the base rhel image. It has been determined that the presence of the vuln is not actually an issue nor does it have a fix available. However, the rc_image_workflow runs a default policy bundle on the image which fails on the presence of any high severity vulns. This happens after the workflow has already tested and pushed the ec tagged image to DH