feat(image): disable secret scanning in base layers (fanal#483)

knqyf263 · web-flow · commit b4ddc80c9950 · 2022-04-21T19:15:06.000+03:00
diff --git a/artifact/image/image.go b/artifact/image/image.go
@@ -168,7 +168,7 @@ func (a Artifact) inspect(ctx context.Context, missingImage string, layerKeys, b
 			// If it is a base layer, secret scanning should not be performed.
 			var disabledAnalyers []analyzer.Type
 			if slices.Contains(baseDiffIDs, diffID) {
-				//disabledAnalyers = append(disabledAnalyers, analyzer.TypeSecret)
+				disabledAnalyers = append(disabledAnalyers, analyzer.TypeSecret)
 			}
 
 			layerInfo, err := a.inspectLayer(ctx, diffID, disabledAnalyers)

Original file line number	Diff line number	Diff line change
`@@ -168,7 +168,7 @@ func (a Artifact) inspect(ctx context.Context, missingImage string, layerKeys, b`
`168`	`168`	`// If it is a base layer, secret scanning should not be performed.`
`169`	`169`	`var disabledAnalyers []analyzer.Type`
`170`	`170`	`if slices.Contains(baseDiffIDs, diffID) {`
`171`		`- //disabledAnalyers = append(disabledAnalyers, analyzer.TypeSecret)`
	`171`	`+ disabledAnalyers = append(disabledAnalyers, analyzer.TypeSecret)`
`172`	`172`	`}`
`173`	`173`
`174`	`174`	`layerInfo, err := a.inspectLayer(ctx, diffID, disabledAnalyers)`