Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add scan failure duration setting #705

Merged
merged 7 commits into from
Oct 19, 2024

Conversation

pditommaso
Copy link
Collaborator

This PR adds Scan failure duration setting

Signed-off-by: Paolo Di Tommaso <[email protected]>
Signed-off-by: Paolo Di Tommaso <[email protected]>
@pditommaso
Copy link
Collaborator Author

@munishchouhan quick double check on this ?

@munishchouhan
Copy link
Member

@munishchouhan quick double check on this ?

ok sure

Signed-off-by: munishchouhan <[email protected]>
@munishchouhan
Copy link
Member

@pditommaso in case of build and mirror docker client retries, but how will this help in case of scan?
because there won't be a retry in this case.

@pditommaso
Copy link
Collaborator Author

Yeah, just realised the same.

@pditommaso
Copy link
Collaborator Author

Let me try one thing

@munishchouhan
Copy link
Member

i tried like this

(base) munish.chouhan@Munishs-MacBook-Pro wavedevmemeoryissue % docker pull $(wave --conda-package bwa  --wave-endpoint http://localhost:9090 --platform linux/arm64 --scan-mode required --await)
Container provisioning did not complete successfully
- Reason: Container security scan did not complete successfully
- Find out more here: https://wave.eu.ngrok.io/view/scans/sc-4f9a5dbaddc1b1c4_1

What's next:
    View a summary of image vulnerabilities and recommendations → docker scout quickview 
"docker pull" requires exactly 1 argument.
See 'docker pull --help'.

Usage:  docker pull [OPTIONS] NAME[:TAG|@DIGEST]

Download an image from a registry

Signed-off-by: Paolo Di Tommaso <[email protected]>
@pditommaso
Copy link
Collaborator Author

Think it's needed to delete the scanId when there's a failure, otherwise it will continue to use the same. Please give a try the last push

@munishchouhan
Copy link
Member

so where does the retry will happen in this case, i sent the request twice, still same:

(base) munish.chouhan@Munishs-MacBook-Pro wavedevmemeoryissue % docker pull $(wave --conda-package bwa  --wave-endpoint http://localhost:9090 --platform linux/arm64 --scan-mode required --await)
Container provisioning did not complete successfully
- Reason: Container security scan did not complete successfully
- Find out more here: https://wave.eu.ngrok.io/view/scans/sc-4f9a5dbaddc1b1c4_1

What's next:
    View a summary of image vulnerabilities and recommendations → docker scout quickview 
"docker pull" requires exactly 1 argument.
See 'docker pull --help'.

Usage:  docker pull [OPTIONS] NAME[:TAG|@DIGEST]

Download an image from a registry
(base) munish.chouhan@Munishs-MacBook-Pro wavedevmemeoryissue % docker pull $(wave --conda-package bwa  --wave-endpoint http://localhost:9090 --platform linux/arm64 --scan-mode required --await)
Container provisioning did not complete successfully
- Reason: Container security scan did not complete successfully
- Find out more here: https://wave.eu.ngrok.io/view/scans/sc-4f9a5dbaddc1b1c4_1

What's next:
    View a summary of image vulnerabilities and recommendations → docker scout quickview 
"docker pull" requires exactly 1 argument.
See 'docker pull --help'.

Usage:  docker pull [OPTIONS] NAME[:TAG|@DIGEST]

Download an image from a registry

@pditommaso
Copy link
Collaborator Author

It's not a retry, the scanId in the store should be deleted, so once there's a new request a new one is assigned e.g. xxx_1 -> xxx_2

@munishchouhan
Copy link
Member

one thing i notice, even if i select --scan-mode required. log is printing:
DEBUG i.s.w.controller.ContainerController - New container request fulfilled

@munishchouhan
Copy link
Member

and scan is not triggering after failure also, i am setting failure duration to 10s:
Screenshot 2024-10-18 at 14 27 05

Signed-off-by: Paolo Di Tommaso <[email protected]>
Signed-off-by: Paolo Di Tommaso <[email protected]>
Signed-off-by: Paolo Di Tommaso <[email protected]>
@pditommaso
Copy link
Collaborator Author

The problem was solved by this 239fffd

@pditommaso pditommaso merged commit 372d6de into master Oct 19, 2024
4 checks passed
@pditommaso pditommaso deleted the add-scan-failure-duration-config branch October 19, 2024 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants