Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update snapshots #986

Closed
wants to merge 2 commits into from
Closed

Update snapshots #986

wants to merge 2 commits into from

Conversation

cuixq
Copy link
Contributor

@cuixq cuixq commented May 20, 2024

Currently tests are broken due to a new vulnerability in test fixtures. This PR aims to fix these failures by updating the snapshots

@codecov-commenter
Copy link

codecov-commenter commented May 20, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.06%. Comparing base (055ef05) to head (42cfeab).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #986   +/-   ##
=======================================
  Coverage   64.05%   64.06%           
=======================================
  Files         146      146           
  Lines       11977    11977           
=======================================
+ Hits         7672     7673    +1     
+ Misses       3853     3852    -1     
  Partials      452      452           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@cuixq cuixq requested a review from another-rex May 20, 2024 02:06
@cuixq cuixq marked this pull request as ready for review May 20, 2024 02:06
@@ -176,7 +176,7 @@ func TestRun(t *testing.T) {
{
name: "Scan locks-many",
args: []string{"", "./fixtures/locks-many"},
exit: 0,
exit: 1,
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@another-rex we may need to update the fixtures to make sure no vulnerabilities. will you be happy to help on this?

@@ -576,12 +576,12 @@ func TestRun_Licenses(t *testing.T) {
{
name: "No vulnerabilities with license summary",
args: []string{"", "--experimental-licenses-summary", "./fixtures/locks-many"},
exit: 0,
exit: 1,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we just bump the version in the relevant lock files in this dir instead? otherwise we're no longer testing the same thing.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

busybox version 1.35.0-r29 has a vulnerability in the test snapshot which I am not sure if we want to keep this version for some testing purpose.

also bumping the version alpine.cdx.xml includes changing cpe, purl and properties, so I mentioned @another-rex to see if he could help with preparing the new fixture.

@cuixq
Copy link
Contributor Author

cuixq commented May 23, 2024

this is addressed in #990

@cuixq cuixq closed this May 23, 2024
@cuixq cuixq deleted the snapshot branch May 23, 2024 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants