test

.github/workflows/tests.yml

@@ -34,3 +34,22 @@ jobs:
       run: coveralls
       env:
         COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }}
+  clair:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up Docker Buildx
+        id: buildx
+        uses: crazy-max/ghaction-docker-buildx@v1
+        with:
+          version: latest
+      - name: Build
+        run: docker buildx build -t myoung34/tilty:latest --output "type=image,push=false" --platform linux/amd64 .
+      - name: Build the stack
+        run: docker-compose -f docker-compose-clair.yml up -d
+      - name: Wait
+        run: sleep 5
+      - name: Download Clair-Scanner
+        run: curl https://github.com/arminc/clair-scanner/releases/download/v12/clair-scanner_linux_amd64 -o clair-scanner && chmod +x clair-scanner
+      - name: Test
+        run: ./clair-scanner --ip $(ip -f inet addr show eth0 | grep -Po 'inet \K[\d.]+') myoung34/tilty:latest

docker-compose-clair.yml

@@ -0,0 +1,18 @@
+version: '2'
+
+services:
+  clair:
+    image: arminc/clair-local-scan:latest
+    ports:
+      - "6060:6060"
+    depends_on:
+      - postgres
+    networks:
+      - clairnet
+  postgres:
+    image: arminc/clair-db:latest
+    networks:
+      - clairnet
+networks:
+  clairnet:
+    driver: bridge

pyproject.toml

@@ -13,9 +13,10 @@ requests = "^2.22"
 jinja2 = "^2.11.1"
 influxdb = "^5.2.3"
 datadog = "^0.34.1"
-coveralls = "^1.11.1"
 
 [tool.poetry.dev-dependencies]
+bandit = "^1.6.2"
+coveralls = "^1.11.1"
 flake8 = "^3.7"
 pytest = "^5.3"
 pylint = "^2.4"