Closed climbertjh2 closed 3 months ago
There is some additional updates required to clean up other uses of /run/scan/src
. However, these can be considered clean-up/re-factoring rather than fixing the current issue. I suggest handling these other ones which are used when running multiple separate containers in parallel as a separate set of updates in a separate PR.
$ cat ash_stdout.txt
Resolved OCI_RUNNER to: /usr/bin/docker
Building image automated-security-helper:local -- this may take a few minutes during the first build...
Running ASH scan using built image...
ASH version 1.3.2
Repository cloned successfully.
ASH found 61 file(s) in the source directory...
Items to scan for in Dockerfile-cdk are: [ yaml yml json template ]
Items to scan for in Dockerfile-yaml are: [ yaml yml tf json dockerfile ]
Running cdk-docker-execute.sh ...
Running yaml-docker-execute.sh ...
waiting on Dockerfile-cdk to finish ...
Items to scan for in Dockerfile-grype are: [ js jsx ts tsx py java go cs sh war jar ]
Items to scan for in Dockerfile-js are: [ js jsx ts tsx ]
Running grype-docker-execute.sh ...
Items to scan for in Dockerfile-py are: [ py pyc ipynb ]
Running js-docker-execute.sh ...
Items to scan for in Dockerfile-git are: [ git ]
Running git-docker-execute.sh ...
Running py-docker-execute.sh ...
Dockerfile Dockerfile-js returned 0
Dockerfile Dockerfile-git returned 0
Dockerfile Dockerfile-py returned 0
Dockerfile Dockerfile-cdk returned 0
Dockerfile-cdk finished with return code 0
waiting on Dockerfile-yaml to finish ...
Dockerfile Dockerfile-yaml returned 0
Dockerfile-yaml finished with return code 0
waiting on Dockerfile-git to finish ...
Dockerfile-git finished with return code 0
waiting on Dockerfile-py to finish ...
Dockerfile-py finished with return code 0
waiting on Dockerfile-js to finish ...
Dockerfile-js finished with return code 0
waiting on Dockerfile-grype to finish ...
Dockerfile Dockerfile-grype returned 0
Dockerfile-grype finished with return code 0
Jobs return code report:
Dockerfile-cdk : 0
Dockerfile-yaml : 0
Dockerfile-git : 0
Dockerfile-py : 0
Dockerfile-js : 0
Dockerfile-grype : 0
Your final report can be found here: /home/runner/work/automated-security-helper/automated-security-helper/ash_output/aggregated_results.txt
ASH execution completed in 23 seconds.
Highest return code is 0
Issue #72 :
Description of changes:
This updates the method used for using allocating and using temporary space. The new method is to allocate a temporary folder/directory in
/tmp
within the container by using themktemp
command. The old method, using a--tmpfs
temporary file-system when launching the container, seems to cause thegrype
andsyft
tools to fail to find files that are placed into the temporary file-system (even though other file utilities likels
andfind
do see the files in that temporary file-system.By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.