sapcc / keppel

81%

master: 81%

LAST BUILD ON BRANCH serve-persisted-trivy-reports

branch: serve-persisted-trivy-reports

CHANGE BRANCH

x

Reset

• serve-persisted-trivy-reports
• SubjectDigest
• account-deletion
• account-deletion-storage-sweep
• account-deletion-stuck
• account-validation-cel-expressions
• allow-reauth-on-anonymous-first-pull-error
• alternate-registry-api-authz
• anycast-support
• api-account-same-account-name
• authz-refactor
• autoupdateable-deps
• bring-repo-up-to-code
• bump-docker
• bye-docker-distribution
• cleanup-licneses
• conformance
• disable-trivy-telemetry
• drop_maintenance
• eager-manifest-handling
• expose-labels
• fix-account-deletion-storage-sweep
• fix-lints
• fix-new-lints
• fix-nolintlint
• fix-shellcheck
• fix-validate
• fix_modernize
• garbage-collection
• gc-delete-untagged
• golangcilint2
• graceful-server-termination
• health-ping
• image-spec
• keppel-vulnerability-status-changed-resource
• kubernetes-driver
• kubernetes-orchestrator
• layer-chunking
• list-repos-manifests-api
• master
• misc
• misc-stuff
• negative-rbac
• new-test-db-infrastructure
• not-rescan-rotten
• obfuscated-errors
• oci-db
• optimize-db-queriesx
• options-everywhere
• persist-trivy-reports
• platform-filter
• protect-subject-manifests
• quotas
• ratelimit
• rbac
• registry-api-audit-trail
• remove-bcrypt
• remove-registry-orchestration
• remove-trivy-dep
• renovate/actions-checkout-5.x
• renovate/external-dependencies
• renovate/github.com-opencontainers-distribution-spec-specs-go-digest
• renovate/github.comsapcc
• renovate/go-github.com-golang-jwt-jwt-v5-vulnerability
• renovate/go-github.com-redis-go-redis-v9-vulnerability
• renovate/go-golang.org-x-crypto-vulnerability
• renovate/major-external-dependencies
• replication-on-first-use
• secret-handling
• storage-sweep
• support-tagpolicy-in-managed-accounts
• swift-federation-driver
• swift-storage-driver-test-coverage
• switch-peer-auth-to-sha256
• sync-manifests
• tag-policy
• token-caching
• track-manifest-references
• track-repos-and-tags
• trivial-storage-mutex
• trivy-swift-deletion
• typos
• validation-retry
• vuln_status_changed_at
• vulnerability-scanning

Build # 15276770865

Build Type

Pull #545

github

Committed by majewsky

Commit Message

serve cached Trivy reports from API

Also, refuse to compute expensive reports in the API process.
Only the janitor process should do that (because it has a bigger RAM
allocation and the computation does not slow down other API requests).

The new fixture file was generated by
`trivy image --scanners vuln --format spdx-json alpine:latest`,
so it does not contain any internal identifiers or information.

Pull Request Pull Request #545: serve cached Trivy reports from API

Run Details

13 of 24 new or added lines in 1 file covered. (54.17%)

3 existing lines in 1 file now uncovered.

7686 of 9503 relevant lines covered (80.88%)

164.28 hits per line