public_git
/
bitnami-containers
mirror of https://github.com/bitnami/containers.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

[bitnami/trivy] Add VIB tests (#30023) 

* [bitnami/trivy] Add VIB tests

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Remove trivy --help test

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Remove wire --help test

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add trigger

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Remove trigger

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

---------

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>
This commit is contained in:
Miguel Ruiz 2023-04-13 13:33:02 +02:00 committed by GitHub
parent f4e6153db5
commit 5c4f3881d4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 59 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.vib/trivy/goss/goss.yaml Normal file
View File

@ -0,0 +1,11 @@
gossfile:
# Goss tests exclusive to the current container
../../trivy/goss/trivy.yaml: {}
# Load scripts from .vib/common/goss/templates
../../common/goss/templates/check-app-version.yaml: {}
../../common/goss/templates/check-binaries.yaml: {}
../../common/goss/templates/check-broken-symlinks.yaml: {}
../../common/goss/templates/check-ca-certs.yaml: {}
../../common/goss/templates/check-linked-libraries.yaml: {}
../../common/goss/templates/check-sed-in-place.yaml: {}
../../common/goss/templates/check-spdx.yaml: {}

7
.vib/trivy/goss/trivy.yaml Normal file
View File

@ -0,0 +1,7 @@
command:
trivy-scanner:
exec: trivy image docker.io/bitnami/minideb:buster-snapshot-20201101T210343Z
timeout: 60000
exit-status: 0
stdout:
- CVE-2020-1751

7
.vib/trivy/goss/vars.yaml Normal file
View File

@ -0,0 +1,7 @@
binaries:
- trivy
- wire
root_dir: /opt/bitnami
version:
bin_name: trivy
flag: -v

18
.vib/trivy/vib-publish.json
View File

@ -3,7 +3,8 @@
"resources": {
"url": "{VIB_ENV_CONTAINER_URL}",
"path": "{VIB_ENV_PATH}"
}
},
"runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd"
},
"phases": {
"package": {
@ -33,6 +34,21 @@
},
"verify": {
"actions": [
{
"action_id": "goss",
"params": {
"resources": {
"path": "/.vib"
},
"tests_file": "trivy/goss/goss.yaml",
"vars_file": "trivy/goss/vars.yaml",
"remote": {
"pod": {
"workload": "deploy-trivy"
}
}
}
},
{
"action_id": "trivy",
"params": {

18
.vib/trivy/vib-verify.json
View File

@ -3,7 +3,8 @@
"resources": {
"url": "{SHA_ARCHIVE}",
"path": "{VIB_ENV_PATH}"
}
},
"runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd"
},
"phases": {
"package": {
@ -29,6 +30,21 @@
},
"verify": {
"actions": [
{
"action_id": "goss",
"params": {
"resources": {
"path": "/.vib"
},
"tests_file": "trivy/goss/goss.yaml",
"vars_file": "trivy/goss/vars.yaml",
"remote": {
"pod": {
"workload": "deploy-trivy"
}
}
}
},
{
"action_id": "trivy",
"params": {