anchore / vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)
Apache License 2.0
70 stars 25 forks source link

Every provider should have "data to vuln object" unit test #309

Closed willmurphyscode closed 11 months ago

willmurphyscode commented 11 months ago

What would you like to be added:

Every provider has unit tests that assert that it can process a representative sample of records - completeness of our ability to process provider data is asserted at the unit test level.

Why is this needed:

We recently had some bugs merged into vunnel that should have failed unit tests - this issue exists to track getting the test coverage high enough.

Additional context: The recent failure was in the debian provider, but we should check all the providers.

Providers:

willmurphyscode commented 11 months ago

Snapshot tests for every provider have been merged.