Add vulnerabilities and packages API to Quay

Fixes #564

test/test_api_security.py

@@ -50,6 +50,8 @@ from endpoints.api.superuser import (SuperUserLogs, SuperUserList, SuperUserMana
                                      SuperUserOrganizationManagement, SuperUserOrganizationList,
                                      SuperUserAggregateLogs)
 
+from endpoints.api.sec import RepositoryImagePackages, RepositoryTagVulnerabilities
+
 
 try:
   app.register_blueprint(api_bp, url_prefix='/api')
@@ -4210,18 +4212,54 @@ class TestOrganizationInvoiceField(ApiTestCase):
     ApiTestCase.setUp(self)
     self._set_url(OrganizationInvoiceField, orgname='buynlarge', field_uuid='1234')
 
-  def test_get_anonymous(self):
+  def test_delete_anonymous(self):
     self._run_test('DELETE', 403, None, None)
 
-  def test_get_freshuser(self):
+  def test_delete_freshuser(self):
     self._run_test('DELETE', 403, 'freshuser', None)
 
-  def test_get_reader(self):
+  def test_delete_reader(self):
     self._run_test('DELETE', 403, 'reader', None)
 
-  def test_get_devtable(self):
+  def test_delete_devtable(self):
     self._run_test('DELETE', 201, 'devtable', None)
 
 
+class TestRepositoryTagVulnerabilities(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RepositoryTagVulnerabilities, repository='devtable/simple', tag='latest')
+
+  def test_get_anonymous(self):
+    self._run_test('GET', 401, None, None)
+
+  def test_get_freshuser(self):
+    self._run_test('GET', 403, 'freshuser', None)
+
+  def test_get_reader(self):
+    self._run_test('GET', 403, 'reader', None)
+
+  def test_get_devtable(self):
+    self._run_test('GET', 200, 'devtable', None)
+
+
+class TestRepositoryImagePackages(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RepositoryImagePackages, repository='devtable/simple', imageid='fake')
+
+  def test_get_anonymous(self):
+    self._run_test('GET', 401, None, None)
+
+  def test_get_freshuser(self):
+    self._run_test('GET', 403, 'freshuser', None)
+
+  def test_get_reader(self):
+    self._run_test('GET', 403, 'reader', None)
+
+  def test_get_devtable(self):
+    self._run_test('GET', 404, 'devtable', None)
+
+
 if __name__ == '__main__':
   unittest.main()