# frozen_string_literal: true RSpec.describe 'klar' do let(:scanner) { 'klar' } let(:project_fixture) { 'docker' } context "when scanning a vulnerable image" do let(:env) do { DOCKERFILE_PATH: project.path.join("minbox-Dockerfile"), DOCKER_IMAGE: "mokhan/minbox:latest" } end pending { expect(subject).to match_schema(:container_scanning) } specify do expect(subject['scan']['status']).to eql('success') expect(subject['vulnerabilities'].length).to be > 0 expect(subject['vulnerabilities']).to all(include('category' => 'container_scanning')) end end context "when scanning a RHEL based image" do let(:env) do { DOCKERFILE_PATH: project.path.join("centos8-Dockerfile"), DOCKER_IMAGE: "centos:8" } end pending { expect(subject).to match_schema(:container_scanning) } specify { expect(subject['scan']['status']).to eql('success') } it "can shell out to `rpm`" do expect(docker.run(image: docker_image, project_path: project.path, env: env, command: 'rpm -q rpm')).to be(true) end end end