Merge pull request #62 from wochinge/master

update existing issue

Author: homoluctus

README.md

@@ -24,6 +24,7 @@ If vulnerabilities are found by Trivy, it creates the following GitHub Issue.
 |issue_title|False|Security Alert|Issue title|
 |issue_label|False|trivy,vulnerability|Issue label (separated by commma)|
 |issue_assignee|False|N/A|Issue assignee (separated by commma)|
+|fail_on_vulnerabilities|False|false|Whether the action should fail if any vulnerabilities were found.|
 
 ### Outputs
 

__tests__/trivy.test.ts

@@ -36,7 +36,7 @@ describe('getDownloadUrl', () => {
     const os = 'Linux';
     const result = await downloader['getDownloadUrl'](version, os);
     expect(result).toMatch(
-      /releases\/download\/v[0-9]\.[0-9]\.[0-9]\/trivy_[0-9]\.[0-9]\.[0-9]_Linux-64bit\.tar\.gz$/
+      /releases\/download\/v[0-9]+\.[0-9]+\.[0-9]+\/trivy_[0-9]+\.[0-9]+\.[0-9]+_Linux-64bit\.tar\.gz$/
     );
   });
 
@@ -198,14 +198,16 @@ describe('Trivy scan', () => {
 });
 
 describe('Parse', () => {
+  const image: string = 'alpine:3.10';
+
   test('the result without vulnerabilities', () => {
     const vulnerabilities: Vulnerability[] = [
       {
         Target: 'alpine:3.10 (alpine 3.10.3)',
         Vulnerabilities: null,
       },
     ];
-    const result = trivy.parse(vulnerabilities);
+    const result = trivy.parse(image, vulnerabilities);
     expect(result).toBe('');
   });
 
@@ -248,10 +250,11 @@ describe('Parse', () => {
         ],
       },
     ];
-    const result = trivy.parse(vulnerabilities);
+    const result = trivy.parse(image, vulnerabilities);
     expect(result).toMatch(
       /\|Title\|Severity\|CVE\|Package Name\|Installed Version\|Fixed Version\|References\|/
     );
+    expect(result).toContain(image);
   });
 });
 

action.yml

@@ -39,6 +39,10 @@ inputs:
   issue_assignee:
     description: 'Issue assignee (separated by commma)'
     required: false
+  fail_on_vulnerabilities:
+    description: Whether the action should fail if a vulnerability was found
+    default: 'false'
+    required: false
 
 outputs:
   issue_number: