Enable Scan Old Image
Background
Need to uncomment the lines in scan-logic-jobs.py to write the old image details (commit sha, digest, build_date).
This will impact latter stages in our pipeline and we will have to verify that everything checks out.
Acceptance Criteria
Verify/validate:
On rescan:
-
Cosign attestations are updated -
Harbor tags are not published -
Documentation is correctly updated -
VAT scan details -
Old image is scanned
On new scan:
-
Cosign attestations are updated -
Harbor tags are published -
Documentation is correctly updated -
VAT scan details -
New image is scanned
Definition of Done
-
Write or update any unit or integration tests -
Project pipeline runs successfully -
Add any applicable checkboxes for testing e.g. Ran pipeline in staging env or pipeline-test-project pipeline run -
Solution is captured as code and/or documentation and merge requests have been submitted -
Code review completed and merge request approved/merged -
All Acceptance Criteria have been completed
Edited by Kenneth Maguire