[JIRA] (JENKINS-60179) Plugin JSON format to match anchore-cli JSONs format

fblaise@cloudbees.com (JIRA)

unread,

Nov 15, 2019, 2:28:04 AM11/15/19

to jenkinsc...@googlegroups.com

Fred Blaise created an issue

Jenkins /

JENKINS-60179

Plugin JSON format to match anchore-cli JSONs format

Issue Type:	Improvement
Assignee:	Daniel Nurmi
Components:	anchore-container-scanner-plugin
Created:	2019-11-15 07:26
Priority:	Major
Reporter:	Fred Blaise

Hi,

While working with the Anchore plugin, I realized that the JSON format of the artifacts saved was not maching the "anchore-cli --json" one.

While I understand the current format is used to be able to display the reports within Jenkins, maybe adding a couple other artifacts would be nice, such as for :

$ anchore-cli --json evaluate check docker.io/xyz/image:latest --detail
$ anchore-cli --json image vuln docker.io/xyz/image:latest all

results would be added to the artifacts saved.

It would be really nice to have both on-par, in order to be able to use them interchangeably with whatever automation needs that could come up (as I do).

Cheers.
fred

cc Daniel Nurmi

Add Comment

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)

swathi@anchore.com (JIRA)

unread,

Nov 16, 2019, 12:52:03 AM11/16/19

to jenkinsc...@googlegroups.com

Swathi Gangisetty assigned an issue to Swathi Gangisetty

Jenkins /

JENKINS-60179

Plugin JSON format to match anchore-cli JSONs format

Change By:	Swathi Gangisetty
Assignee:	Daniel Nurmi Swathi Gangisetty

Add Comment

swathi@anchore.com (JIRA)

unread,

Nov 16, 2019, 1:06:02 AM11/16/19

to jenkinsc...@googlegroups.com

Swathi Gangisetty commented on

JENKINS-60179

Re: Plugin JSON format to match anchore-cli JSONs format

Hello Fred Blaise, you are right about the use of the artifacts generated by the anchore plugin - its mainly to render the reports and the data format was what the good old anchore tool output (precursor to anchore engine and now almost deprecated). The plugin actually works off of the same data you get from anchore-cli --json option but mangles it in order to be compatible with the rendering aspect. We've been meaning to switch it to be consistent but haven't had a chance to get to it. I can put in a fix to generate additional artifacts with data in the same format as you'd expect from the api (or anchore-cli --json option). Does that work for you?