feat: allow disabling CVE independently from search

Agent-Logs-Url: https://github.com/project-zot/zot/sessions/9b89c154-fd36-4315-9910-9c19f96e2417

Co-authored-by: rchincha <45800463+rchincha@users.noreply.github.com>

pkg/cli/server/extensions_test.go

@@ -100,6 +100,41 @@ func TestVerifyExtensionsConfig(t *testing.T) {
 		So(cli.NewServerRootCmd().Execute(), ShouldNotBeNil)
 	})
 
+	Convey("Test verify CVE can be explicitly disabled for remote storage", t, func(c C) {
+		content := fmt.Sprintf(`{
+			"storage":{
+				"rootDirectory":"%s",
+				"dedupe":true,
+				"remoteCache":false,
+				"storageDriver":{
+					"name":"s3",
+					"rootdirectory":"/zot",
+					"region":"us-east-2",
+					"bucket":"zot-storage",
+					"secure":true,
+					"skipverify":false
+				}
+			},
+			"http":{
+				"address":"127.0.0.1",
+				"port":"8080"
+			},
+			"extensions":{
+				"search": {
+					"enable": true,
+					"cve": {
+						"enable": false
+					}
+				}
+			}
+		}`, t.TempDir())
+
+		tmpfile := MakeTempFileWithContent(t, "zot-test.json", content)
+		os.Args = []string{"cli_test", "verify", tmpfile}
+
+		So(cli.NewServerRootCmd().Execute(), ShouldBeNil)
+	})
+
 	Convey("Test verify w/ sync and w/o filesystem storage", t, func(c C) {
 		content := fmt.Sprintf(`{"storage":{"rootDirectory":"%s", "storageDriver": {"name": "s3"}},
 							"http":{"address":"127.0.0.1","port":"8080","realm":"zot",
@@ -1099,6 +1134,41 @@ func TestServeSearchEnabledNoCVE(t *testing.T) {
 		So(found, ShouldBeTrue)
 		So(err, ShouldBeNil)
 	})
+
+	Convey("search explicitly enabled, and CVE explicitly disabled", t, func(c C) {
+		content := `{
+				"storage": {
+					"rootDirectory": "%s"
+				},
+				"http": {
+					"address": "127.0.0.1",
+					"port": "%s"
+				},
+				"log": {
+					"level": "debug",
+					"output": "%s"
+				},
+				"extensions": {
+					"search": {
+						"enable": true,
+						"cve": {
+							"enable": false
+						}
+					}
+				}
+			}`
+
+		logPath, _, err := runCLIWithConfig(t, content)
+		So(err, ShouldBeNil)
+
+		found, err := ReadLogFileAndSearchString(logPath, `"CVE":{"Enable":false`, readLogFileTimeout)
+		So(found, ShouldBeTrue)
+		So(err, ShouldBeNil)
+
+		found, err = ReadLogFileAndSearchString(logPath, "cve config not provided, skipping cve-db update", readLogFileTimeout)
+		So(found, ShouldBeTrue)
+		So(err, ShouldBeNil)
+	})
 }
 
 func TestServeSearchDisabled(t *testing.T) {