Skip to content

Support image digest in MondooAuditConfig#1382

Merged
chris-rock merged 1 commit intomainfrom
feature/image-digest
Feb 9, 2026
Merged

Support image digest in MondooAuditConfig#1382
chris-rock merged 1 commit intomainfrom
feature/image-digest

Conversation

@chris-rock
Copy link
Copy Markdown
Member

Summary

  • Add Digest field to the Image struct in MondooAuditConfig API
  • Update ContainerImageResolver interface to accept digest parameter
  • When digest is specified, it takes precedence over tag and skips image resolution
  • Update all controllers to pass digest from scanner image configuration

Closes #759

Behavior

name tag digest Result
- - - ghcr.io/mondoohq/mondoo-operator/cnspec:12-rootless
custom/img - - custom/img:12-rootless
custom/img v2 - custom/img:v2
custom/img - sha256:abc... custom/img@sha256:abc...
custom/img v2 sha256:abc... custom/img@sha256:abc... (digest wins)

Test plan

  • make generate manifests - CRD includes new digest field
  • make test - All tests pass including new digest tests
  • make lint - No linting errors
  • Manual test: Apply a MondooAuditConfig with digest and verify the resulting pod uses the digest-based image reference

🤖 Generated with Claude Code

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 6, 2026

Test Results

  5 files  +  3   41 suites  +39   36m 36s ⏱️ + 36m 13s
306 tests +304  306 ✅ +306  0 💤  - 1  0 ❌  - 1 
325 runs  +321  323 ✅ +323  2 💤 ±0  0 ❌  - 2 

Results for commit 874c6fd. ± Comparison against base commit 637c4fa.

♻️ This comment has been updated with latest results.

Add a Digest field to the Image struct allowing users to specify
container images by digest (e.g., sha256:abc123...) instead of or
in addition to tags. When digest is specified, it takes precedence
over tag and skips image resolution.

Closes #759

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@chris-rock chris-rock force-pushed the feature/image-digest branch from 66face1 to 874c6fd Compare February 9, 2026 11:31
@chris-rock chris-rock merged commit e85aae5 into main Feb 9, 2026
24 checks passed
@chris-rock chris-rock deleted the feature/image-digest branch February 9, 2026 11:57
@github-actions github-actions Bot locked and limited conversation to collaborators Feb 9, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

MondooAuditConfig should support image digest

2 participants