Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump trivy-checks #7417

Merged
merged 5 commits into from
Aug 30, 2024
Merged

chore(deps): Bump trivy-checks #7417

merged 5 commits into from
Aug 30, 2024

Conversation

simar7
Copy link
Member

@simar7 simar7 commented Aug 28, 2024

Description

Bump trivy-checks

Related PRs:

@simar7 simar7 requested a review from nikpivkin August 28, 2024 23:52
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Comment on lines -557 to -561
libs, err := rego.LoadEmbeddedLibraries()
require.NoError(t, err)
for name, library := range libs {
regoMap["/rules/"+name] = library.String()
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OPA has a bug with converting a module to a string and back. https://github.com/open-policy-agent/opa

Especially there is no point in loading the libraries yourself, as Rego scanner can do it.

Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
@@ -33,7 +33,7 @@ func Test_Scanning_Plan(t *testing.T) {
failedResults = append(failedResults, r)
}
}
assert.Len(t, results, 15)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rego check is added successfully passed when no misconfigs are detected using it, unlike Go check where it was done manually.

@simar7 simar7 added this pull request to the merge queue Aug 30, 2024
Merged via the queue into main with commit 39c8024 Aug 30, 2024
12 checks passed
@simar7 simar7 deleted the bump-trivy-checks-v0.14.0 branch August 30, 2024 06:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants