mirror of
https://github.com/projectatomic/atomic.git
synced 2026-02-06 12:45:57 +01:00
4672f98423
There is a race condition in oscpd where it sometimes fails to scan because of a threading issue. While that is resolved upstream, we set the max number of threads to 1 to avoid it. This resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1368896 Closes: #692 Approved by: rhatdan
16 lines
607 B
Plaintext
16 lines
607 B
Plaintext
type: scanner
|
|
scanner_name: openscap
|
|
image_name: rhel7/openscap
|
|
default_scan: cve
|
|
custom_args: ['-v', '/etc/oscapd:/etc/oscapd:ro']
|
|
scans: [
|
|
{ name: cve,
|
|
args: ['oscapd-evaluate', 'scan', '--no-standard-compliance', '--targets', 'chroots-in-dir:///scanin', '--output', '/scanout', '-j1'],
|
|
description: "Performs a CVE scan based on known CVE data"},
|
|
{ name: standards_compliance,
|
|
args: ['oscapd-evaluate', 'scan', '--targets', 'chroots-in-dir:///scanin', '--output', '/scanout', '--no-cve-scan', '-j1'],
|
|
description: "Performs a standard scan"
|
|
}
|
|
]
|
|
|