feature: container-scan command to trivy scan containers - #191
feature: container-scan command to trivy scan containers#191franciscoovazevedo wants to merge 5 commits into
2 new security issues (0 max.).
Here is an overview of what got changed by this pull request:
Issues
======
- Added 6
Complexity increasing per file
==============================
- cli-v2.go 1
- cmd/container_scan.go 19
- cmd/container_scan_test.go 22
See the complete overview on Codacy
Annotations
Check notice on line 1 in cmd/container_scan.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan.go#L1
should have a package comment
Check warning on line 126 in cmd/container_scan.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan.go#L126
parameter 'cmd' seems to be unused, consider removing or renaming it as _
Check failure on line 138 in cmd/container_scan.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan.go#L138
Detected non-static command inside Command.
Check failure on line 138 in cmd/container_scan.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan.go#L138
OS command injection is a critical vulnerability that can lead to a full system compromise as it may allow an adversary to pass in arbitrary commands or arguments to be executed.
Check failure on line 9 in cmd/container_scan_test.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan_test.go#L9
Method TestBuildTrivyArgs has 118 lines of code (limit is 100)
Check failure on line 227 in cmd/container_scan_test.go
codacy-production / Codacy Static Code Analysis
cmd/container_scan_test.go#L227
Method TestValidateImageName has 135 lines of code (limit is 100)