search

anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities
Apache License 2.0
1.57k stars 273 forks source link

max_days_since_fix policy parameter not triggering after updating to 1.1.0 from 0.9.1 #1395

Open davidtseng opened 1 year ago

davidtseng commented 1 year ago

Is this a request for help?:

Is this a BUG REPORT or a FEATURE REQUEST? (choose one):

Version of Anchore Engine and Anchore CLI if applicable:

Engine DB Version: 0.0.16 Engine Code Version: 1.1.0

What happened:

For the policy gate: anchore-cli policy describe --gate=vulnerabilities --trigger package +------------------------------------------------+------------------------------------------+----------+--------------+ max_days_since_fix If provided (only evaluated when False 30 fix_available option is also set to true), the fix first observed time must be older than days provided, to trigger. +------------------------------------------------+------------------------------------------+----------+--------------+

max_days_since_fix does not appear to trigger after updating anchore-engine to 1.1.0, it was working with 0.9.1. Currently our scans do not trigger with this parameter when they used to with the same policy.

Also max_days_since_creation does not seem to trigger in some limited tests.

What did you expect to happen:

max_days_since_fix parameter triggers as expected

Any relevant log output from /var/log/anchore:

What docker images are you using:

How to reproduce the issue:

Anything else we need to know: