Skip to content
This repository has been archived by the owner on Jan 16, 2025. It is now read-only.

Update malicious structure and add support for "deleted" status #65

Merged
merged 3 commits into from
Oct 15, 2024

Conversation

puerco
Copy link
Contributor

@puerco puerco commented Oct 15, 2024

This PR fixes two flaking tests that were breaking the CI as the malicious structure has been updated and the trusty API is now marking some packages with the status deleted.

Fixes broken CI in #64

Copy link

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 65fffaac:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

Copy link

@stacklok-cloud-staging stacklok-cloud-staging bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: github.com/stacklok/trusty-sdk-go

Trusty Score: 4.2

Scoring details
Component Score
Repository activity 2
From activity
Package activity 4.2
Trust-summary 3
Provenance 10
User activity 6.4
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 5
Number of git tags or releases 5
Versions matched to tags or releases 5

@puerco puerco changed the title Update internal types Update malicious structure and add support for "deleted" status Oct 15, 2024
Signed-off-by: Adolfo García Veytia (puerco) <[email protected]>
Signed-off-by: Adolfo García Veytia (puerco) <[email protected]>
This commit adds support for the `deleted` package status in the action parser.

Signed-off-by: Adolfo García Veytia (puerco) <[email protected]>
@puerco puerco force-pushed the update-internal-types branch from 65fffaa to 3ef8a1e Compare October 15, 2024 01:52
@rdimitrov rdimitrov merged commit cfc625a into stacklok:main Oct 15, 2024
3 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants