fix: reduce syft debug level (#446)

* fix: reduce syft debug level Signed-off-by: Keith Zantow <kzantow@gmail.com> * chore: update tests Signed-off-by: Keith Zantow <kzantow@gmail.com> --------- Signed-off-by: Keith Zantow <kzantow@gmail.com>
anchore · Mar 5, 2024 · 9fece9e · 9fece9e
1 parent f3355df
commit 9fece9e
Show file tree

Hide file tree

Showing 5 changed files with 23 additions and 10 deletions.
diff --git a/dist/attachReleaseAssets/index.js b/dist/attachReleaseAssets/index.js
diff --git a/dist/downloadSyft/index.js b/dist/downloadSyft/index.js
diff --git a/dist/runSyftAction/index.js b/dist/runSyftAction/index.js
diff --git a/src/github/SyftGithubAction.ts b/src/github/SyftGithubAction.ts
@@ -127,7 +127,11 @@ async function executeSyft({
   }
 
   // https://github.com/anchore/syft#configuration
-  let args = ["packages", "-vv"];
+  let args = ["scan"];
+
+  if (core.isDebug()) {
+    args = [...args, "-vv"];
+  }
 
   if ("image" in input && input.image) {
     if (registryUser) {

diff --git a/tests/SyftGithubAction.test.ts b/tests/SyftGithubAction.test.ts
@@ -65,8 +65,8 @@ describe("Action", () => {
     const { args } = data.execArgs;
 
     expect(args).toBeDefined()
-    expect(args.length > 2).toBeTruthy();
-    expect(args[2]).toBe("some-image:latest")
+    expect(args.length > 1).toBeTruthy();
+    expect(args[1]).toBe("some-image:latest")
   });
 
   it("runs with path input", async () => {
@@ -81,8 +81,8 @@ describe("Action", () => {
     const { args } = data.execArgs;
 
     expect(args).toBeDefined()
-    expect(args.length > 2).toBeTruthy();
-    expect(args[2]).toBe("dir:some-path")
+    expect(args.length > 1).toBeTruthy();
+    expect(args[1]).toBe("dir:some-path")
   });
 
   it("runs with file input", async () => {
@@ -97,8 +97,8 @@ describe("Action", () => {
     const { args } = data.execArgs;
 
     expect(args).toBeDefined()
-    expect(args.length > 2).toBeTruthy();
-    expect(args[2]).toBe("file:some-file.jar")
+    expect(args.length > 1).toBeTruthy();
+    expect(args[1]).toBe("file:some-file.jar")
   });
 
   it("runs with release uploads inputs", async () => {