From a9a1e820e22d52c94bd70dd5bfce8f29bbdb7ce4 Mon Sep 17 00:00:00 2001 From: William Murphy Date: Tue, 24 Sep 2024 10:25:27 -0400 Subject: [PATCH] feat: add azure linux 3 test image labels (#137) * feat: add azure linux 3 test image labels Signed-off-by: Will Murphy * label vuln for Azure Linux 3 golang RPM Signed-off-by: Will Murphy * chore: label azure linux 3 vuln at correct path Signed-off-by: Will Murphy --------- Signed-off-by: Will Murphy --- .yardstick.yaml | 1 + .../acc44b60-9c21-4e3b-8618-f434345df77a.json | 1 + 2 files changed, 2 insertions(+) create mode 100644 labels/docker.io+anchore+test_images@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d/acc44b60-9c21-4e3b-8618-f434345df77a.json diff --git a/.yardstick.yaml b/.yardstick.yaml index 364dfb96..016a8c3e 100644 --- a/.yardstick.yaml +++ b/.yardstick.yaml @@ -97,6 +97,7 @@ x-ref: - gcr.io/distroless/python3-debian11@sha256:69ae7f133d33faab720af28e78fb45707b623bcbc94ae02a07c633bf053f4b40 - registry.suse.com/suse/sles12sp4:26.380@sha256:94b537f5b312e7397b5d0bbb3d892f961acdd9454950fc233d77f771e25335fb - registry.suse.com/suse/sle15:15.1.6.2.461@sha256:6e613c994c3b33224e439ef8ee9003fb69416f77f7a6b1da0b18981d5aa3bb75 + - docker.io/anchore/test_images:azurelinux3-63671fe@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d # these images are intended to have "partial coverage" when it comes to labels. These labels are narrowly targeted at confirmed # results or from sources that only report narrow findings. Analyses that use these images cannot confidently compute an F1 score, diff --git a/labels/docker.io+anchore+test_images@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d/acc44b60-9c21-4e3b-8618-f434345df77a.json b/labels/docker.io+anchore+test_images@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d/acc44b60-9c21-4e3b-8618-f434345df77a.json new file mode 100644 index 00000000..07795259 --- /dev/null +++ b/labels/docker.io+anchore+test_images@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d/acc44b60-9c21-4e3b-8618-f434345df77a.json @@ -0,0 +1 @@ +{"ID": "acc44b60-9c21-4e3b-8618-f434345df77a", "effective_cve": "CVE-2022-41722", "image": {"exact": "docker.io/anchore/test_images@sha256:2d761ba36575ddd4e07d446f4f2a05448298c20e5bdcd3dedfbbc00f9865240d"}, "label": "TP", "package": {"name": "golang", "version": "1.22.5-1.azl3"}, "timestamp": "2024-09-12T11:41:18.387745+00:00", "tool": "grype[custom-db]@v0.79.4-15-g6e8d880", "user": "willmurphy", "vulnerability_id": "CVE-2022-41722"} \ No newline at end of file