grype-db icon indicating copy to clipboard operation
grype-db copied to clipboard

Test: assert namespaces populated before publishing a DB

Open spiffcs opened this issue 2 years ago • 1 comments
trafficstars

What would you like to be added: An integration test or self validation should be added to grype-db that checks if the database being published includes all known namespaces (or has an extra one).

Why is this needed: Previously grype-db have been published that were missing namespaces or had 0 entries in a namespace. This check will ensure that we publish complete DB with respect to known namespaces.

Additional context: Tools team can provide more context via the Debian Post-Mortem document

spiffcs avatar Sep 29 '23 20:09 spiffcs

I've got part of a solution in with https://github.com/anchore/grype-db/pull/192 but am putting this back in the backlog until the namespaces can be sourced with a single source of truth (described in the PR description).

wagoodman avatar Nov 02 '23 12:11 wagoodman