Skip to content

Commit fea58f7

Browse files
authored
fix(scanner): upload correct offline vulns for 4.5+ (#11970)
1 parent 731446a commit fea58f7

2 files changed

Lines changed: 12 additions & 2 deletions

File tree

‎.github/workflows/scanner-offline-bundle-update.yaml‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,15 @@ jobs:
4949
uses: google-github-actions/setup-gcloud@v2
5050

5151
- name: Generate offline vulnerability bundle
52-
run: .github/workflows/scripts/scanner-update-offline-bundle.sh "$ROX_PRODUCT_VERSION"
52+
run: |
53+
case "${{ env.ROX_PRODUCT_VERSION }}" in
54+
4.4)
55+
.github/workflows/scripts/scanner-update-offline-bundle.sh "${{ env.ROX_PRODUCT_VERSION }}" "vulns.json.zst"
56+
;;
57+
*)
58+
.github/workflows/scripts/scanner-update-offline-bundle.sh "${{ env.ROX_PRODUCT_VERSION }}" "vulnerabilities.zip"
59+
;;
60+
esac
5361
5462
send-notification:
5563
needs:

‎.github/workflows/scripts/scanner-update-offline-bundle.sh‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,10 @@ set -eu
55
SCANNER_V4_DEFS_BUCKET="https://storage.googleapis.com/definitions.stackrox.io"
66
ROX_PRODUCT_VERSION="$1"
77
PRODUCT_VERSION="${ROX_PRODUCT_VERSION}.0"
8+
VULNS_FILE_NAME="$2"
9+
810
declare -A files_to_download=(
9-
["v4/vulns.json.zst"]="${SCANNER_V4_DEFS_BUCKET}/v4/vulnerability-bundles/${PRODUCT_VERSION}/vulns.json.zst"
11+
["v4/$VULNS_FILE_NAME"]="${SCANNER_V4_DEFS_BUCKET}/v4/vulnerability-bundles/${PRODUCT_VERSION}/$VULNS_FILE_NAME"
1012
["v4/mapping.zip"]="https://definitions.stackrox.io/v4/redhat-repository-mappings/mapping.zip"
1113
)
1214

0 commit comments

Comments
 (0)