csutils / csmock

A tool for static analysis, dynamic analysis, and formal verification of RPM packages
GNU General Public License v3.0
23 stars 20 forks source link

snyk: skip writing of scan metadata when no supported project #155

Closed jperezdealgaba closed 6 months ago

jperezdealgaba commented 6 months ago

Reproducer: csmock -r rhel-9-x86_64 -t snyk -f octavia-amphora-image-vert-fips-x86_64-18.0-20240305.1.el9ost.src.rpm

Related: https://issues.redhat.com/browse/OSH-583

When an snyk-unsupported project is scanned using snyk, no stats are generated.

kdudka commented 6 months ago

The fix looks good. The commit message should say skip writing of scan metadata rather than fix generation of stats.

jperezdealgaba commented 6 months ago

Modified commit message