Skip to content

fix(ingest): accept Grype source.target as string or object - #25

Merged
justrunme merged 2 commits into
mainfrom
fix/grype-source-target-string
Oct 11, 2026
Merged

justrunme merged 2 commits into
mainfrom
fix/grype-source-target-string

Conversation

@justrunme

Copy link
Copy Markdown
Owner

Summary

  • Grype JSON for tarball/file scans sets source.target to a string path; image scans still use an object with userInput/imageID.
  • Flexible unmarshaling restores blastguard ingest --vulns-grype for release dogfood (v0.2.0 release failed on this).
  • Unit test covers the string-target shape.

Test plan

  • go test ./internal/ingest/
  • CI green on this PR
  • Re-run Release v0.2.0 after merge (retag on new main)

Newer Grype emits source.target as a plain path string for
file/directory/tarball scans. Unmarshaling that into the image
struct broke release dogfood (ingest of release-grype.json).
@justrunme
justrunme merged commit 3cff383 into main Oct 11, 2026
4 checks passed
@justrunme
justrunme deleted the fix/grype-source-target-string branch October 11, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant