feat: Improve output for dockerfile instructions

This commit allows for use of the installCommand extracted from a RUN instruction in newer versions of the SDP. [CAP-280]
snyk · Nov 23, 2021 · 2043232 · 2043232
1 parent 9ab4e54
commit 2043232
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/src/lib/snyk-test/run-test.ts b/src/lib/snyk-test/run-test.ts
@@ -445,7 +445,7 @@ async function parseRes(
       const dockerfilePackage = dockerfilePackages[vuln.name.split('/')[0]];
       if (dockerfilePackage) {
         (vuln as DockerIssue).dockerfileInstruction =
-          dockerfilePackage.instruction;
+          dockerfilePackage.installCommand;
       }
       (vuln as DockerIssue).dockerBaseImage = res.docker!.baseImage;
       return vuln;

diff --git a/test/acceptance/cli-test/cli-test.docker.spec.ts b/test/acceptance/cli-test/cli-test.docker.spec.ts
@@ -649,7 +649,7 @@ export const DockerTests: AcceptanceTests = {
                   data: {
                     dockerfilePackages: {
                       bzip2: {
-                        instruction: 'RUN test instruction',
+                        installCommand: 'test installCommand',
                       },
                     },
                   },
@@ -678,7 +678,7 @@ export const DockerTests: AcceptanceTests = {
         t.fail('should have found vuln');
       } catch (err) {
         const msg = err.message;
-        t.match(msg, "Image layer: 'RUN test instruction'");
+        t.match(msg, "Image layer: 'test installCommand'");
       }
     },
 
@@ -697,7 +697,7 @@ export const DockerTests: AcceptanceTests = {
                   data: {
                     dockerfilePackages: {
                       bzip2: {
-                        instruction: 'RUN test instruction',
+                        installCommand: 'test installCommand',
                       },
                     },
                   },
@@ -726,7 +726,7 @@ export const DockerTests: AcceptanceTests = {
         t.fail('should have found vuln');
       } catch (err) {
         const msg = err.message;
-        t.match(msg, "Image layer: 'RUN test instruction'");
+        t.match(msg, "Image layer: 'test installCommand'");
       }
     },