project-copacetic / copacetic

🧵 CLI tool for directly patching container images using reports from vulnerability scanners
https://project-copacetic.github.io/copacetic/
Apache License 2.0
845 stars 59 forks source link

ci: updated trivy dependency to v0.51.4 #635

Closed ChristofferNissen closed 1 month ago

ChristofferNissen commented 1 month ago

Replace trivy v0.45.1 with v.51.4 to resolve potential vulnerability with ECS.

Convert report.Metadata.OS.Family to string as it is a string under a custom struct type masking a string

Closes #397

codecov[bot] commented 1 month ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 34.20%. Comparing base (2602d59) to head (bc6cb59). Report is 72 commits behind head on main.

:exclamation: Current head bc6cb59 differs from pull request most recent head 4545a5d

Please upload reports for the commit 4545a5d to get more accurate results.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #635 +/- ## ========================================== + Coverage 32.51% 34.20% +1.69% ========================================== Files 17 18 +1 Lines 1621 1523 -98 ========================================== - Hits 527 521 -6 + Misses 1062 969 -93 - Partials 32 33 +1 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.