Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 10 additions & 12 deletions cmd/osv-scanner/scan/image/__snapshots__/command_test.snap
Original file line number Diff line number Diff line change
Expand Up @@ -456,7 +456,7 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 29 packages affected by 94 known vulnerabilities (13 Critical, 29 High, 36 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
Total 29 packages affected by 92 known vulnerabilities (13 Critical, 28 High, 35 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
39 vulnerabilities can be fixed.


Expand All @@ -483,7 +483,7 @@ Ubuntu:22.04
| libzstd | 1.4.8+dfsg-3build1 | No fix available | 1 | libzstd1 | # 4 Layer | ubuntu |
| lz4 | 1.9.3-2build2 | No fix available | 1 | liblz4-1 | # 4 Layer | ubuntu |
| ncurses | 6.3-2ubuntu0.1 | Partial fixes Available | 3 | libncurses6... (5) | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Partial fixes Available | 7 | libssl3 | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Fix Available | 5 | libssl3 | # 4 Layer | ubuntu |
| p11-kit | 0.24.0-6build1 | No fix available | 1 | libp11-kit0 | # 4 Layer | ubuntu |
| pam | 1.4.0-11ubuntu2.5 | Partial fixes Available | 3 | libpam-modules... (4) | # 4 Layer | ubuntu |
| pcre2 | 10.39-3ubuntu0.1 | No fix available | 1 | libpcre2-8-0 | # 4 Layer | ubuntu |
Expand Down Expand Up @@ -512,7 +512,7 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 29 packages affected by 94 known vulnerabilities (13 Critical, 29 High, 36 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
Total 29 packages affected by 92 known vulnerabilities (13 Critical, 28 High, 35 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
39 vulnerabilities can be fixed.


Expand All @@ -539,7 +539,7 @@ Ubuntu:22.04
| libzstd | 1.4.8+dfsg-3build1 | No fix available | 1 | libzstd1 | # 4 Layer | ubuntu |
| lz4 | 1.9.3-2build2 | No fix available | 1 | liblz4-1 | # 4 Layer | ubuntu |
| ncurses | 6.3-2ubuntu0.1 | Partial fixes Available | 3 | libncurses6... (5) | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Partial fixes Available | 7 | libssl3 | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Fix Available | 5 | libssl3 | # 4 Layer | ubuntu |
| p11-kit | 0.24.0-6build1 | No fix available | 1 | libp11-kit0 | # 4 Layer | ubuntu |
| pam | 1.4.0-11ubuntu2.5 | Partial fixes Available | 3 | libpam-modules... (4) | # 4 Layer | ubuntu |
| pcre2 | 10.39-3ubuntu0.1 | No fix available | 1 | libpcre2-8-0 | # 4 Layer | ubuntu |
Expand Down Expand Up @@ -587,7 +587,7 @@ Scanning local image tarball "./testdata/test-ubuntu-with-packages.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 30 packages affected by 96 known vulnerabilities (13 Critical, 31 High, 36 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
Total 30 packages affected by 94 known vulnerabilities (13 Critical, 30 High, 35 Medium, 6 Low, 10 Unknown) from 1 ecosystem.
39 vulnerabilities can be fixed.


Expand Down Expand Up @@ -615,7 +615,7 @@ Ubuntu:22.04
| libzstd | 1.4.8+dfsg-3build1 | No fix available | 1 | libzstd1 | # 4 Layer | ubuntu |
| lz4 | 1.9.3-2build2 | No fix available | 1 | liblz4-1 | # 4 Layer | ubuntu |
| ncurses | 6.3-2ubuntu0.1 | Partial fixes Available | 3 | libncurses6... (5) | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Partial fixes Available | 7 | libssl3 | # 4 Layer | ubuntu |
| openssl | 3.0.2-0ubuntu1.18 | Fix Available | 5 | libssl3 | # 4 Layer | ubuntu |
| p11-kit | 0.24.0-6build1 | No fix available | 1 | libp11-kit0 | # 4 Layer | ubuntu |
| pam | 1.4.0-11ubuntu2.5 | Partial fixes Available | 3 | libpam-modules... (4) | # 4 Layer | ubuntu |
| pcre2 | 10.39-3ubuntu0.1 | No fix available | 1 | libpcre2-8-0 | # 4 Layer | ubuntu |
Expand Down Expand Up @@ -1425,6 +1425,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne
"PYSEC-2026-3447",
"GHSA-5rjg-fvgr-3xxf",
"GHSA-cx63-2mw6-8hw5",
"GHSA-h35f-9h28-mq5c",
"GHSA-r9hx-vwmv-q579"
]
}
Expand Down Expand Up @@ -1621,6 +1622,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne
"PYSEC-2026-3447",
"GHSA-5rjg-fvgr-3xxf",
"GHSA-cx63-2mw6-8hw5",
"GHSA-h35f-9h28-mq5c",
"GHSA-r9hx-vwmv-q579"
]
}
Expand Down Expand Up @@ -4455,18 +4457,16 @@ Scanning local image tarball "./testdata/test-node_modules-npm-full.tar"
"index": 4
}
},
"groups": 7,
"groups": 5,
"vulnerabilities": [
"USN-8414-1",
"USN-7980-1",
"USN-8155-1",
"USN-7786-1",
"USN-7278-1",
"UBUNTU-CVE-2024-13176",
"UBUNTU-CVE-2024-41996",
"UBUNTU-CVE-2024-9143",
"UBUNTU-CVE-2025-15467",
"UBUNTU-CVE-2025-27587",
"UBUNTU-CVE-2025-68160",
"UBUNTU-CVE-2025-69418",
"UBUNTU-CVE-2025-69419",
Expand Down Expand Up @@ -5693,18 +5693,16 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"
"index": 4
}
},
"groups": 7,
"groups": 5,
"vulnerabilities": [
"USN-8414-1",
"USN-7980-1",
"USN-8155-1",
"USN-7786-1",
"USN-7278-1",
"UBUNTU-CVE-2024-13176",
"UBUNTU-CVE-2024-41996",
"UBUNTU-CVE-2024-9143",
"UBUNTU-CVE-2025-15467",
"UBUNTU-CVE-2025-27587",
"UBUNTU-CVE-2025-68160",
"UBUNTU-CVE-2025-69418",
"UBUNTU-CVE-2025-69419",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -637,7 +637,7 @@ interactions:
"vulns": [
{
"id": "UBUNTU-CVE-2017-11164",
"modified": "2026-04-22T11:10:44.262299Z"
"modified": "2026-07-21T18:18:16.477212Z"
}
]
},
Expand Down Expand Up @@ -976,7 +976,7 @@ interactions:
"vulns": [
{
"id": "UBUNTU-CVE-2017-11164",
"modified": "2026-04-22T11:10:44.262299Z"
"modified": "2026-07-21T18:18:16.477212Z"
}
]
},
Expand Down Expand Up @@ -1521,7 +1521,7 @@ interactions:
proto: HTTP/2.0
proto_major: 2
proto_minor: 0
content_length: 13082
content_length: 12938
body: |
{
"results": [
Expand Down Expand Up @@ -2055,7 +2055,7 @@ interactions:
"vulns": [
{
"id": "UBUNTU-CVE-2017-11164",
"modified": "2026-04-22T11:10:44.262299Z"
"modified": "2026-07-21T18:18:16.477212Z"
}
]
},
Expand All @@ -2070,10 +2070,6 @@ interactions:
"id": "UBUNTU-CVE-2024-13176",
"modified": "2026-06-16T13:30:37.035462Z"
},
{
"id": "UBUNTU-CVE-2024-41996",
"modified": "2026-07-08T22:45:14.910732Z"
},
{
"id": "UBUNTU-CVE-2024-9143",
"modified": "2026-06-16T13:30:42.533862Z"
Expand All @@ -2082,10 +2078,6 @@ interactions:
"id": "UBUNTU-CVE-2025-15467",
"modified": "2026-07-20T16:16:27.574391Z"
},
{
"id": "UBUNTU-CVE-2025-27587",
"modified": "2026-06-16T13:30:42.231385Z"
},
{
"id": "UBUNTU-CVE-2025-68160",
"modified": "2026-07-08T22:45:11.201806Z"
Expand Down Expand Up @@ -2418,7 +2410,7 @@ interactions:
}
headers:
Content-Length:
- "13082"
- "12938"
Content-Type:
- application/json
status: 200 OK
Expand Down Expand Up @@ -2943,7 +2935,7 @@ interactions:
proto: HTTP/2.0
proto_major: 2
proto_minor: 0
content_length: 13082
content_length: 12938
body: |
{
"results": [
Expand Down Expand Up @@ -3477,7 +3469,7 @@ interactions:
"vulns": [
{
"id": "UBUNTU-CVE-2017-11164",
"modified": "2026-04-22T11:10:44.262299Z"
"modified": "2026-07-21T18:18:16.477212Z"
}
]
},
Expand All @@ -3492,10 +3484,6 @@ interactions:
"id": "UBUNTU-CVE-2024-13176",
"modified": "2026-06-16T13:30:37.035462Z"
},
{
"id": "UBUNTU-CVE-2024-41996",
"modified": "2026-07-08T22:45:14.910732Z"
},
{
"id": "UBUNTU-CVE-2024-9143",
"modified": "2026-06-16T13:30:42.533862Z"
Expand All @@ -3504,10 +3492,6 @@ interactions:
"id": "UBUNTU-CVE-2025-15467",
"modified": "2026-07-20T16:16:27.574391Z"
},
{
"id": "UBUNTU-CVE-2025-27587",
"modified": "2026-06-16T13:30:42.231385Z"
},
{
"id": "UBUNTU-CVE-2025-68160",
"modified": "2026-07-08T22:45:11.201806Z"
Expand Down Expand Up @@ -3840,7 +3824,7 @@ interactions:
}
headers:
Content-Length:
- "13082"
- "12938"
Content-Type:
- application/json
status: 200 OK
Expand Down Expand Up @@ -4379,7 +4363,7 @@ interactions:
proto: HTTP/2.0
proto_major: 2
proto_minor: 0
content_length: 19704
content_length: 19560
body: |
{
"results": [
Expand Down Expand Up @@ -5345,7 +5329,7 @@ interactions:
"vulns": [
{
"id": "UBUNTU-CVE-2017-11164",
"modified": "2026-04-22T11:10:44.262299Z"
"modified": "2026-07-21T18:18:16.477212Z"
}
]
},
Expand All @@ -5360,10 +5344,6 @@ interactions:
"id": "UBUNTU-CVE-2024-13176",
"modified": "2026-06-16T13:30:37.035462Z"
},
{
"id": "UBUNTU-CVE-2024-41996",
"modified": "2026-07-08T22:45:14.910732Z"
},
{
"id": "UBUNTU-CVE-2024-9143",
"modified": "2026-06-16T13:30:42.533862Z"
Expand All @@ -5372,10 +5352,6 @@ interactions:
"id": "UBUNTU-CVE-2025-15467",
"modified": "2026-07-20T16:16:27.574391Z"
},
{
"id": "UBUNTU-CVE-2025-27587",
"modified": "2026-06-16T13:30:42.231385Z"
},
{
"id": "UBUNTU-CVE-2025-68160",
"modified": "2026-07-08T22:45:11.201806Z"
Expand Down Expand Up @@ -5708,7 +5684,7 @@ interactions:
}
headers:
Content-Length:
- "19704"
- "19560"
Content-Type:
- application/json
status: 200 OK
Expand Down Expand Up @@ -7064,7 +7040,7 @@ interactions:
},
{
"id": "GHSA-rmj7-2vxq-3g9f",
"modified": "2026-07-20T21:30:42.835792Z"
"modified": "2026-07-21T12:46:29.787439Z"
}
]
},
Expand Down Expand Up @@ -7264,7 +7240,7 @@ interactions:
},
{
"id": "GHSA-h2qv-fj59-j46j",
"modified": "2026-07-10T12:45:24.288759Z"
"modified": "2026-07-21T12:46:29.754499Z"
}
]
},
Expand Down Expand Up @@ -7328,7 +7304,7 @@ interactions:
},
{
"id": "GHSA-c2gf-v879-257j",
"modified": "2026-07-10T12:45:24.320409Z"
"modified": "2026-07-21T12:46:28.160944Z"
},
{
"id": "GHSA-f6hv-jmp6-3vwv",
Expand Down Expand Up @@ -7369,7 +7345,7 @@ interactions:
},
{
"id": "GHSA-6jv9-x5w9-2ccm",
"modified": "2026-07-10T12:45:25.759557Z"
"modified": "2026-07-21T12:46:28.207660Z"
},
{
"id": "GHSA-rgrr-p7gp-5xj7",
Expand Down Expand Up @@ -7441,11 +7417,11 @@ interactions:
"vulns": [
{
"id": "GHSA-5pvg-856g-cp85",
"modified": "2026-07-10T12:45:25.665872Z"
"modified": "2026-07-21T12:46:28.166860Z"
},
{
"id": "GHSA-676x-f7gg-47vc",
"modified": "2026-07-10T12:45:25.760302Z"
"modified": "2026-07-21T12:46:28.167598Z"
},
{
"id": "GHSA-xmv7-r254-6q78",
Expand Down Expand Up @@ -7881,11 +7857,11 @@ interactions:
"vulns": [
{
"id": "GHSA-2r2c-cx56-8933",
"modified": "2026-07-20T21:30:36.917644Z"
"modified": "2026-07-21T14:59:37.751566Z"
},
{
"id": "GHSA-47qp-hqvx-6r3f",
"modified": "2026-07-20T21:30:39.763738Z"
"modified": "2026-07-21T14:59:37.539426Z"
}
]
},
Expand Down Expand Up @@ -8463,7 +8439,7 @@ interactions:
proto: HTTP/2.0
proto_major: 2
proto_minor: 0
content_length: 2617
content_length: 2687
body: |
{
"results": [
Expand Down Expand Up @@ -8660,6 +8636,10 @@ interactions:
"id": "GHSA-cx63-2mw6-8hw5",
"modified": "2026-07-07T17:57:13.326243Z"
},
{
"id": "GHSA-h35f-9h28-mq5c",
"modified": "2026-07-21T19:15:32.059653Z"
},
{
"id": "GHSA-r9hx-vwmv-q579",
"modified": "2026-02-04T03:03:25.892107Z"
Expand Down Expand Up @@ -8720,7 +8700,7 @@ interactions:
}
headers:
Content-Length:
- "2617"
- "2687"
Content-Type:
- application/json
status: 200 OK
Expand Down Expand Up @@ -9329,7 +9309,7 @@ interactions:
proto: HTTP/2.0
proto_major: 2
proto_minor: 0
content_length: 6247
content_length: 6317
body: |
{
"results": [
Expand Down Expand Up @@ -9692,6 +9672,10 @@ interactions:
"id": "GHSA-cx63-2mw6-8hw5",
"modified": "2026-07-07T17:57:13.326243Z"
},
{
"id": "GHSA-h35f-9h28-mq5c",
"modified": "2026-07-21T19:15:32.059653Z"
},
{
"id": "GHSA-r9hx-vwmv-q579",
"modified": "2026-02-04T03:03:25.892107Z"
Expand Down Expand Up @@ -9828,7 +9812,7 @@ interactions:
}
headers:
Content-Length:
- "6247"
- "6317"
Content-Type:
- application/json
status: 200 OK
Expand Down
Loading
Loading