Skip to content

fix: Update OpenVEX report to correctly reference OCI IDs #810

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 25 commits into from
Closed

fix: Update OpenVEX report to correctly reference OCI IDs #810

wants to merge 25 commits into from

Conversation

@shubhamsugara22
Copy link

@shubhamsugara22 shubhamsugara22 commented Oct 16, 2024

Enhanced image handling in patchWithContext function
This fixes the issue mentioned and enhances image handling & also ensuring compliance with the OpenVEX specification and improving the accuracy of reports generated

Closes #667

@shubhamsugara22 shubhamsugara22 force-pushed the fix_openvex_report_oci_id branch from e0e7a5f to ba39f0a Compare October 16, 2024 18:31
@shubhamsugara22 shubhamsugara22 changed the title Fix : Update OpenVEX report to correctly reference OCI IDs fix: Update OpenVEX report to correctly reference OCI IDs Oct 16, 2024
@shubhamsugara22
Copy link
Author

shubhamsugara22 commented Oct 16, 2024

working on fixes , will update soon

shubhamsugara22 and others added 24 commits November 14, 2024 00:39
@shubhamsugara22
Fix for openvex report oci id
9f53040 
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump @mdx-js/react from 3.0.1 to 3.1.0 in /website in the all …
abc34ee 
…group (project-copacetic#812)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump anchore/sbom-action from 0.17.3 to 0.17.4 in the all group (
f306855 
project-copacetic#811)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump http-proxy-middleware from 2.0.6 to 2.0.7 in /website (pr…
e87fedf 
…oject-copacetic#814)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@prakrit55 @sozercan @shubhamsugara22
chore: Replaced apt with apt-get (project-copacetic#804)
8ac4dc3 
Signed-off-by: Griffin <prakritimandal611@gmail.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@sozercan @shubhamsugara22
feat: azure linux 3 support (project-copacetic#815)
9fa6a16 
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump the all group with 7 updates (project-copacetic#816)
9f24318 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump k8s.io/apimachinery from 0.31.1 to 0.31.2 (project-copace…
d7b411f 
…tic#817)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@github-actions @ashnamehrotra @shubhamsugara22
chore: Generate v0.9.x docs (project-copacetic#819)
3bdafbf 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: ashnamehrotra <26015861+ashnamehrotra@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump the all group in /website with 3 updates (project-copacet…
bf46fd1 
…ic#821)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@pradhans0906 @dependabot @shubhamsugara22
docs: update installation.md (project-copacetic#820)
df4c915 
Signed-off-by: swapnasagar pradhan <swapnasagar.pradhan@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@sozercan @ashnamehrotra @shubhamsugara22
docs: add lower than required package error (project-copacetic#420)
fa903c5 
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Co-authored-by: Ashna Mehrotra <ashnamehrotra@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@sozercan @shubhamsugara22
ci: classify gen docs as blocking (project-copacetic#826)
1ac3287 
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump github.com/aquasecurity/trivy from 0.56.2 to 0.57.0 (proj…
194ec8f 
…ect-copacetic#822)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump the all group across 1 directory with 2 updates (project-…
be911dd 
…copacetic#827)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @shubhamsugara22
chore: bump the all group in /website with 3 updates (project-copacet…
2cd7793 
…ic#835)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump github.com/quay/claircore from 1.5.32 to 1.5.33 (project-…
27927d8 
…copacetic#833)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump google.golang.org/grpc from 1.67.1 to 1.68.0 (project-cop…
161dff1 
…acetic#832)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump github.com/docker/buildx from 0.17.1 to 0.18.0 (project-c…
705c2a9 
…opacetic#824)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump golang.org/x/sync from 0.8.0 to 0.9.0 (project-copacetic#831
32257e1 
)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@dependabot @sozercan @shubhamsugara22
chore: bump the all group across 1 directory with 2 updates (project-…
4cdf1e0 
…copacetic#838)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@shubhamsugara22
Fixed lint error
e0bef0b 
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@shubhamsugara22
Revert changes
679d48a 
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@shubhamsugara22
Revert changes
6d611a9 
Signed-off-by: shubhamsugara22 <shubhamsugara22@gmail.com>
@shubhamsugara22 shubhamsugara22 force-pushed the fix_openvex_report_oci_id branch from f729eab to 6d611a9 Compare November 13, 2024 19:09
@sozercan
Copy link
Member

sozercan commented Nov 14, 2024

@shubhamsugara22 looks like there was an issue with merge, I don't see any changes

@shubhamsugara22
Copy link
Author

shubhamsugara22 commented Nov 18, 2024

@sozercan Closing the PR , doesnt look like i am able to resolve issue
Someone else might pick it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jeremyrickard jeremyrickard Awaiting requested review from jeremyrickard

@sozercan sozercan Awaiting requested review from sozercan

@ashnamehrotra ashnamehrotra Awaiting requested review from ashnamehrotra

Assignees

No one assigned

Labels

None yet

Projects

Copacetic Workboard
Status: ✅ Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[BUG] fix openvex report oci id

4 participants

@shubhamsugara22 @sozercan @prakrit55 @pradhans0906