vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add support for Quay's vulnerability tool

Browse source
This commit is contained in:
Quentin Machu 2015-10-05 13:35:01 -04:00 • committed by Jimmy Zelinskie
parent c97bc0d8d0
commit 37118423a5
8 changed files with 135 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workers/securityworker.py
View file

@ -33,6 +33,7 @@ def _get_image_to_export(version):
images = (Image
.select(candidates.c.docker_image_id, candidates.c.uuid, candidates.c.checksum)
.distinct()
.from_(candidates)
.order_by(db_random_func())
.tuples()
@ -54,13 +55,14 @@ def _get_image_to_export(version):
images = (Image
.select(candidates.c.docker_image_id, candidates.c.uuid, candidates.c.checksum, candidates.c.parent_docker_image_id, candidates.c.parent_storage_uuid)
.distinct()
.from_(candidates)
.order_by(db_random_func())
.tuples()
.limit(BATCH_SIZE))
for image in images:
rimages.append({'docker_image_id': image[0], 'storage_uuid': image[1], 'storage_checksum': image[2], 'parent_docker_image_id': image[3], 'parent_storage_uuid': image[4]})
rimages.append({'docker_image_id': image[0], 'storage_uuid': image[1], 'storage_checksum': image[2], 'parent_docker_image_id': None, 'parent_storage_uuid': None})
# Re-shuffle, otherwise the images without parents will always be on the top
random.shuffle(rimages)
@ -164,8 +166,7 @@ class SecurityWorker(Worker):
'TarSum': img['storage_checksum'],
'Path': uri
}
if img['parent_docker_image_id'] is not None and img['parent_storage_uuid'] is not None:
if img['parent_docker_image_id'] is not None:
request['ParentID'] = img['parent_docker_image_id']+'.'+img['parent_storage_uuid']
# Post request