opendevstack / ods-pipeline

Alternative ODS CI/CD pipeline based on Tekton / OpenShift Pipelines
Apache License 2.0
13 stars 5 forks source link

Aqua and helm-diff log output is incomplete #593

Closed michaelsauter closed 2 years ago

michaelsauter commented 2 years ago

Aqua log output is printed to stderr, and this is not picked up when the scan is successful. While we may not need the logs when there is a successful scan, it seems there are cases where stdout is empty, and hopefully stderr can provide more information.

Further, the result handling of the aqua scan is not tested right now which makes changes in this area brittle.

Helm diff output is quite similar and should be improved as well. There seem to be cases (e.g. invalid resources) that are not reported properly in the log, making issues hard to debug.