Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 27 additions & 15 deletions cmd/osv-scanner/scan/image/__snapshots__/command_test.snap
Original file line number Diff line number Diff line change
Expand Up @@ -458,8 +458,8 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 30 packages affected by 94 known vulnerabilities (13 Critical, 25 High, 37 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
43 vulnerabilities can be fixed.
Total 30 packages affected by 95 known vulnerabilities (13 Critical, 25 High, 38 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
44 vulnerabilities can be fixed.


Ubuntu:22.04
Expand Down Expand Up @@ -493,7 +493,7 @@ Ubuntu:22.04
| perl | 5.34.0-3ubuntu1.3 | Partial fixes Available | 16 | perl-base | # 4 Layer | ubuntu |
| sed | 4.8-1ubuntu2 | Fix Available | 1 | sed | # 4 Layer | ubuntu |
| shadow | 1:4.8.1-2ubuntu2.2 | No fix available | 2 | login, passwd | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 4 | libsystemd0... (2) | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 5 | libsystemd0... (2) | # 4 Layer | ubuntu |
| tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | Partial fixes Available | 4 | tar | # 4 Layer | ubuntu |
| util-linux | 1:2.37.2-4ubuntu3.4 | No fix available | 6 | bsdutils | # 4 Layer | ubuntu |
| util-linux | 2.37.2-4ubuntu3.4 | Partial fixes Available | 7 | libblkid1... (6) | # 4 Layer | ubuntu |
Expand All @@ -515,8 +515,8 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 30 packages affected by 94 known vulnerabilities (13 Critical, 25 High, 37 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
43 vulnerabilities can be fixed.
Total 30 packages affected by 95 known vulnerabilities (13 Critical, 25 High, 38 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
44 vulnerabilities can be fixed.


Ubuntu:22.04
Expand Down Expand Up @@ -550,7 +550,7 @@ Ubuntu:22.04
| perl | 5.34.0-3ubuntu1.3 | Partial fixes Available | 16 | perl-base | # 4 Layer | ubuntu |
| sed | 4.8-1ubuntu2 | Fix Available | 1 | sed | # 4 Layer | ubuntu |
| shadow | 1:4.8.1-2ubuntu2.2 | No fix available | 2 | login, passwd | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 4 | libsystemd0... (2) | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 5 | libsystemd0... (2) | # 4 Layer | ubuntu |
| tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | Partial fixes Available | 4 | tar | # 4 Layer | ubuntu |
| util-linux | 1:2.37.2-4ubuntu3.4 | No fix available | 6 | bsdutils | # 4 Layer | ubuntu |
| util-linux | 2.37.2-4ubuntu3.4 | Partial fixes Available | 7 | libblkid1... (6) | # 4 Layer | ubuntu |
Expand Down Expand Up @@ -591,8 +591,8 @@ Scanning local image tarball "./testdata/test-ubuntu-with-packages.tar"


Container Scanning Result (Ubuntu 22.04.5 LTS) (Based on "ubuntu" image):
Total 31 packages affected by 96 known vulnerabilities (13 Critical, 27 High, 37 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
43 vulnerabilities can be fixed.
Total 31 packages affected by 97 known vulnerabilities (13 Critical, 27 High, 38 Medium, 8 Low, 11 Unknown) from 1 ecosystem.
44 vulnerabilities can be fixed.


Ubuntu:22.04
Expand Down Expand Up @@ -627,7 +627,7 @@ Ubuntu:22.04
| perl | 5.34.0-3ubuntu1.3 | Partial fixes Available | 16 | perl-base | # 4 Layer | ubuntu |
| sed | 4.8-1ubuntu2 | Fix Available | 1 | sed | # 4 Layer | ubuntu |
| shadow | 1:4.8.1-2ubuntu2.2 | No fix available | 2 | login, passwd | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 4 | libsystemd0... (2) | # 4 Layer | ubuntu |
| systemd | 249.11-0ubuntu3.12 | Partial fixes Available | 5 | libsystemd0... (2) | # 4 Layer | ubuntu |
| tar | 1.34+dfsg-1ubuntu0.1.22.04.2 | Partial fixes Available | 4 | tar | # 4 Layer | ubuntu |
| util-linux | 1:2.37.2-4ubuntu3.4 | No fix available | 6 | bsdutils | # 4 Layer | ubuntu |
| util-linux | 2.37.2-4ubuntu3.4 | Partial fixes Available | 7 | libblkid1... (6) | # 4 Layer | ubuntu |
Expand Down Expand Up @@ -1380,7 +1380,7 @@ skipping file "home/linuxbrew/.linuxbrew/Homebrew/Library/Taps/homebrew/homebrew


Container Scanning Result (Ubuntu 22.04.5 LTS):
Total 1 package affected by 6 known vulnerabilities (1 Critical, 3 High, 1 Medium, 1 Low, 0 Unknown) from 1 ecosystem.
Total 1 package affected by 7 known vulnerabilities (1 Critical, 4 High, 1 Medium, 1 Low, 0 Unknown) from 1 ecosystem.
0 vulnerabilities can be fixed.


Expand All @@ -1390,7 +1390,7 @@ GIT
+-------------------------------------+-------------------+------------------+------------+-------------------------+------------------+---------------+
| SOURCE PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | BINARY PACKAGES (COUNT) | INTRODUCED LAYER | IN BASE IMAGE |
+-------------------------------------+-------------------+------------------+------------+-------------------------+------------------+---------------+
| https://github.com/DaveGamble/cJSON | 1.7.17 | No fix available | 6 | | # 19 Layer | -- |
| https://github.com/DaveGamble/cJSON | 1.7.17 | No fix available | 7 | | # 19 Layer | -- |
+-------------------------------------+-------------------+------------------+------------+-------------------------+------------------+---------------+

For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner scan image --serve <image_name>`.
Expand Down Expand Up @@ -4670,13 +4670,16 @@ Scanning local image tarball "./testdata/test-opensuse-leap-15.5.tar"
"index": 4
}
},
"groups": 4,
"groups": 5,
"vulnerabilities": [
"USN-8402-1",
"USN-8626-1",
"USN-7559-1",
"USN-8119-1",
"UBUNTU-CVE-2023-7008",
"UBUNTU-CVE-2025-4598",
"UBUNTU-CVE-2026-15059",
"UBUNTU-CVE-2026-16742",
"UBUNTU-CVE-2026-29111",
"UBUNTU-CVE-2026-40225",
"UBUNTU-CVE-2026-40226",
Expand Down Expand Up @@ -4729,13 +4732,16 @@ Scanning local image tarball "./testdata/test-opensuse-leap-15.5.tar"
"index": 4
}
},
"groups": 4,
"groups": 5,
"vulnerabilities": [
"USN-8402-1",
"USN-8626-1",
"USN-7559-1",
"USN-8119-1",
"UBUNTU-CVE-2023-7008",
"UBUNTU-CVE-2025-4598",
"UBUNTU-CVE-2026-15059",
"UBUNTU-CVE-2026-16742",
"UBUNTU-CVE-2026-29111",
"UBUNTU-CVE-2026-40225",
"UBUNTU-CVE-2026-40226",
Expand Down Expand Up @@ -5939,13 +5945,16 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"
"index": 4
}
},
"groups": 4,
"groups": 5,
"vulnerabilities": [
"USN-8402-1",
"USN-8626-1",
"USN-7559-1",
"USN-8119-1",
"UBUNTU-CVE-2023-7008",
"UBUNTU-CVE-2025-4598",
"UBUNTU-CVE-2026-15059",
"UBUNTU-CVE-2026-16742",
"UBUNTU-CVE-2026-29111",
"UBUNTU-CVE-2026-40225",
"UBUNTU-CVE-2026-40226",
Expand Down Expand Up @@ -5998,13 +6007,16 @@ Scanning local image tarball "./testdata/test-ubuntu.tar"
"index": 4
}
},
"groups": 4,
"groups": 5,
"vulnerabilities": [
"USN-8402-1",
"USN-8626-1",
"USN-7559-1",
"USN-8119-1",
"UBUNTU-CVE-2023-7008",
"UBUNTU-CVE-2025-4598",
"UBUNTU-CVE-2026-15059",
"UBUNTU-CVE-2026-16742",
"UBUNTU-CVE-2026-29111",
"UBUNTU-CVE-2026-40225",
"UBUNTU-CVE-2026-40226",
Expand Down
Loading
Loading