mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-12 15:50:15 -08:00
* detector/alpine: Add LayerID to detect vulns Signed-off-by: Simarpreet Singh <simar@linux.com> * amazon: Add LayerID to DetectedVulns Signed-off-by: Simarpreet Singh <simar@linux.com> * debian: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * oracle: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * photon: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * redhat: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * suse: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * ubuntu: Add LayerID to DetectVulns + tests Signed-off-by: Simarpreet Singh <simar@linux.com> * integration: Fix integration tests to include LayerID Signed-off-by: Simarpreet Singh <simar@linux.com> * fix(rpc): add layer_id * fix(rpc): insert layer_id to the struct * fix(extractor): add cleanup function * fix(library): add layer ID to detected vulnerabilities * test: update mocks * chore(mod): point to the feature branch of fanal * mod: Point to fanal/master Signed-off-by: Simarpreet Singh <simar@linux.com> * scan_test: Include LayerID as part of the assertion Signed-off-by: Simarpreet Singh <simar@linux.com> * docker_engine_test.go: Update an error message to conform with fanal/master. Signed-off-by: Simarpreet Singh <simar@linux.com> Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
77 lines
1.7 KiB
Go
77 lines
1.7 KiB
Go
package photon
|
|
|
|
import (
|
|
"os"
|
|
"testing"
|
|
|
|
ftypes "github.com/aquasecurity/fanal/types"
|
|
dbTypes "github.com/aquasecurity/trivy-db/pkg/types"
|
|
"github.com/aquasecurity/trivy/pkg/log"
|
|
"github.com/aquasecurity/trivy/pkg/types"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
type MockPhotonConfig struct {
|
|
update func(string) error
|
|
get func(string, string) ([]dbTypes.Advisory, error)
|
|
}
|
|
|
|
func (mpc MockPhotonConfig) Update(a string) error {
|
|
if mpc.update != nil {
|
|
return mpc.update(a)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (mpc MockPhotonConfig) Get(a string, b string) ([]dbTypes.Advisory, error) {
|
|
if mpc.get != nil {
|
|
return mpc.get(a, b)
|
|
}
|
|
return []dbTypes.Advisory{}, nil
|
|
}
|
|
|
|
func TestMain(m *testing.M) {
|
|
log.InitLogger(false, false)
|
|
os.Exit(m.Run())
|
|
}
|
|
|
|
func TestScanner_Detect(t *testing.T) {
|
|
t.Run("happy path", func(t *testing.T) {
|
|
s := &Scanner{
|
|
vs: MockPhotonConfig{
|
|
get: func(s string, s2 string) (advisories []dbTypes.Advisory, err error) {
|
|
return []dbTypes.Advisory{
|
|
{
|
|
VulnerabilityID: "photon-123",
|
|
FixedVersion: "3.0.0",
|
|
},
|
|
}, nil
|
|
},
|
|
},
|
|
}
|
|
|
|
vuls, err := s.Detect("3.1.0", []ftypes.Package{
|
|
{
|
|
Name: "testpkg",
|
|
Version: "2.1.0",
|
|
Release: "hotfix",
|
|
SrcRelease: "test-hotfix",
|
|
SrcVersion: "2.1.0",
|
|
LayerID: "sha256:932da51564135c98a49a34a193d6cd363d8fa4184d957fde16c9d8527b3f3b02",
|
|
},
|
|
})
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, []types.DetectedVulnerability{
|
|
{
|
|
VulnerabilityID: "photon-123",
|
|
PkgName: "testpkg",
|
|
InstalledVersion: "2.1.0-hotfix",
|
|
FixedVersion: "3.0.0",
|
|
LayerID: "sha256:932da51564135c98a49a34a193d6cd363d8fa4184d957fde16c9d8527b3f3b02",
|
|
},
|
|
}, vuls)
|
|
})
|
|
|
|
// TODO: Add unhappy paths
|
|
}
|