fix: add image digest to report (#1446)

Signed-off-by: chenk <hen.keinan@gmail.com>
aquasecurity · Aug 21, 2023 · 2d3ad4d · 2d3ad4d
1 parent 77b44fe
commit 2d3ad4d
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/pkg/plugins/trivy/plugin.go b/pkg/plugins/trivy/plugin.go
@@ -1823,7 +1823,7 @@ func (p *plugin) ParseReportData(ctx trivyoperator.PluginContext, imageRef strin
 			return vulnReport, secretReport, &sbomReport, err
 		}
 	}
-	registry, artifact, err := p.parseImageRef(imageRef)
+	registry, artifact, err := p.parseImageRef(imageRef, reports.Metadata.ImageID)
 	if err != nil {
 		return vulnReport, secretReport, &sbomReport, err
 	}
@@ -2030,7 +2030,7 @@ func (p *plugin) secretSummary(secrets []v1alpha1.ExposedSecret) v1alpha1.Expose
 	return s
 }
 
-func (p *plugin) parseImageRef(imageRef string) (v1alpha1.Registry, v1alpha1.Artifact, error) {
+func (p *plugin) parseImageRef(imageRef string, imageID string) (v1alpha1.Registry, v1alpha1.Artifact, error) {
 	ref, err := containerimage.ParseReference(imageRef)
 	if err != nil {
 		return v1alpha1.Registry{}, v1alpha1.Artifact{}, err
@@ -2047,6 +2047,9 @@ func (p *plugin) parseImageRef(imageRef string) (v1alpha1.Registry, v1alpha1.Art
 	case containerimage.Digest:
 		artifact.Digest = t.DigestStr()
 	}
+	if len(artifact.Digest) == 0 {
+		artifact.Digest = imageID
+	}
 	return registry, artifact, nil
 }