Skip to content

chore: regenerate fixture results for Trivy DB update#299

Merged
andrzej-janczak merged 1 commit into
masterfrom
chore/regenerate-fixtures
Jun 1, 2026
Merged

chore: regenerate fixture results for Trivy DB update#299
andrzej-janczak merged 1 commit into
masterfrom
chore/regenerate-fixtures

Conversation

@andrzej-janczak
Copy link
Copy Markdown
Contributor

Trivy vulnerability DB updated since last fixture generation. Regenerated all results.xml files using the scripts/regenerate_fixtures.py script against the latest codacy-trivy:latest local Docker image (Trivy 0.70.0).

Changed fixture counts vs previous:

  • all-patterns: minor updates
  • pattern-vulnerability-critical: minor updates
  • pattern-vulnerability-high: 57 → 49 issues
  • pattern-vulnerability-medium: 75 → 89 issues
  • pattern-vulnerability-minor: 19 → 21 issues

🤖 Generated with Claude Code

@andrzej-janczak andrzej-janczak requested a review from a team as a code owner June 1, 2026 09:49
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates various vulnerability test result XML files under docs/multiple-tests/. The modifications refine vulnerability descriptions to be more detailed and standard, consolidate or remove redundant golang/stdlib entries, and introduce new vulnerability entries for npm/axios and golang/stdlib. As there are no review comments, I have no feedback to provide.

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The pull request successfully updates the test fixture results to reflect changes in the Trivy vulnerability database. The Codacy analysis indicates that the changes are up to standards, and no new issues or security concerns were identified by the review agents.

The updated results align with the expected issue counts (High: 49, Medium: 89, Minor: 21) and correctly include full vulnerability descriptions and fix availability information. No logic gaps or implementation failures were found.

Test suggestions

  • Verify that all results.xml files are valid XML and follow the Checkstyle format required by the parser.
  • Confirm that the number of <error> entries in the severity-specific results files (e.g., pattern-vulnerability-high) matches the updated totals in the PR description.
  • Validate that the message attributes in the XML correctly incorporate the new CVE descriptions and 'no fix available' or 'update to X' suffixes.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

@andrzej-janczak andrzej-janczak enabled auto-merge (squash) June 1, 2026 10:29
@andrzej-janczak andrzej-janczak disabled auto-merge June 1, 2026 10:29
@andrzej-janczak andrzej-janczak merged commit a9ec845 into master Jun 1, 2026
8 checks passed
@andrzej-janczak andrzej-janczak deleted the chore/regenerate-fixtures branch June 1, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants