Skip to content

fix: enable Kaniko archive (CN-942) #776

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ividalATSnyk wants to merge 6 commits into
base: main
Choose a base branch
from
+11 −1
Open

fix: enable Kaniko archive (CN-942) #776

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
39fd868
fix: add separate test:unit and test:system steps
ividalATSnyk Apr 2, 2026
03c29a8
fix: update resource class to medium to fix OOM
ividalATSnyk Apr 2, 2026
33a3dfc
fix: add kaniko archive case
ividalATSnyk Apr 2, 2026
58b85bc
fix: add test case to validate Kaniko extraction
ividalATSnyk Apr 2, 2026
304ab7d
fix: updated dates on ignores
ividalATSnyk Apr 3, 2026
6fc1431
Merge branch 'main' into CN-942-fix-kaniko-archive
ividalATSnyk Apr 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .snyk
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,15 +5,15 @@ ignore:
SNYK-JS-TAR-15307072:
- 'snyk-nodejs-lockfile-parser > @yarnpkg/core > tar':
reason: 'Indirect dependency from snyk-nodejs-lockfile-parser, waiting for upstream fix'
expires: 2026-04-03T00:00:00.000Z
expires: 2026-04-15T00:00:00.000Z
SNYK-JS-TAR-15416075:
- 'snyk-nodejs-lockfile-parser > @yarnpkg/core > tar':
reason: 'Indirect dependency from snyk-nodejs-lockfile-parser, waiting for upstream fix'
expires: 2026-04-03T00:00:00.000Z
expires: 2026-04-15T00:00:00.000Z
SNYK-JS-TAR-15456201:
- 'snyk-nodejs-lockfile-parser > @yarnpkg/core > tar':
reason: 'Indirect dependency from snyk-nodejs-lockfile-parser, waiting for upstream fix'
expires: 2026-04-03T00:00:00.000Z
expires: 2026-04-15T00:00:00.000Z
SNYK-JS-LODASH-15869625:
- '*':
reason: 'Indirect dependency, waiting for upstream fix'
Expand Down
1 change: 1 addition & 0 deletions lib/scan.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -259,6 +259,7 @@ export async function extractContent(
switch (imageType) {
case ImageType.DockerArchive:
case ImageType.OciArchive:
case ImageType.KanikoArchive:
imagePath = getAndValidateArchivePath(targetImage);
break;
case ImageType.Identifier:
Expand Down
11 changes: 10 additions & 1 deletion test/system/image-type/kaniko-archive.spec.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
import { scan } from "../../../lib";
import { extractContent, scan } from "../../../lib";
import { getFixture } from "../../util";

describe("kaniko archive scanning", () => {
Expand All @@ -12,4 +12,13 @@ describe("kaniko archive scanning", () => {

expect(pluginResult).toMatchSnapshot();
});

it("should extract content from a kaniko archive without throwing", async () => {
const fixturePath = getFixture("kaniko-archives/kaniko-busybox.tar");
const imageNameAndTag = `kaniko-archive:${fixturePath}`;

await expect(
extractContent([], { path: imageNameAndTag }),
).resolves.not.toThrow();
});
});
Loading