From 5c76c11bb27da066185f6ca5f22fd81c6a3f9e55 Mon Sep 17 00:00:00 2001 From: Lisca Ana-Roberta <55219463+aokirisaki@users.noreply.github.com> Date: Thu, 23 Mar 2023 20:11:29 +0200 Subject: [PATCH] fix(cve): blackbox cve tests now verifying actual cves (#1300) Signed-off-by: Ana-Roberta Lisca --- test/blackbox/cve.bats | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/test/blackbox/cve.bats b/test/blackbox/cve.bats index d6fbe73b..3627e09e 100644 --- a/test/blackbox/cve.bats +++ b/test/blackbox/cve.bats @@ -64,4 +64,14 @@ function teardown_file() { [ $(echo "${lines[-1]}" | jq '.tags[]') = '"1.20"' ] run ${ZLI_PATH} cve ${REGISTRY_NAME} -I golang:1.20 [ "$status" -eq 0 ] + + found=0 + for i in "${lines[@]}" + do + + if [[ "$i" = *"CVE-2021-29921 CRITICAL python-ipaddress: Improper input validation o..."* ]]; then + found=1 + fi + done + [ "$found" -eq 1 ] }