Skip to content

Container Scanning report common output: Re-write klar analyzer using Go

Sub-issue of #32934 (closed)

Implementation plan

  1. Rewrite Klar analyzer converter using Go
  2. Output gl-container-scanning-report.json using the Security Products Common Format
  3. Support vulnerability whitelisting with clair-whitelist.yml file
  4. Support table output in CI job log, including an approved/unapproved status label on each vulnerability as determined by the contents of the clair-whitelist.yml file
  5. Rewrite all tests from node.js to Go
  6. Update start.sh to use the new Go Klar analyzer converter.
  7. Update Container Scanning test project to use new klar analyzer and report format
Edited by Adam Cohen