feat: add support for remote-repo-url UNIFY-506

Author: adrobuta

lib/response-builder.ts

@@ -20,6 +20,7 @@ async function buildResponse(
   excludeBaseImageVulns: boolean,
   names?: string[],
   ociDistributionMetadata?: OCIDistributionMetadata,
+  remoteUrl?: string | undefined,
 ): Promise<types.PluginResponse> {
   const deps = depsAnalysis.depTree.dependencies;
   const dockerfilePkgs = collectDockerfilePkgs(dockerfileAnalysis, deps);
@@ -208,6 +209,12 @@ async function buildResponse(
     ...applicationDependenciesScanResults,
   ];
 
+  if (remoteUrl) {
+    scanResults.forEach((scanResult) => {
+      scanResult.target.remoteUrl = remoteUrl;
+    });
+  }
+
   return {
     scanResults,
   };

lib/static.ts

@@ -66,11 +66,14 @@ export async function analyzeStatically(
     });
   }
 
+  const remoteUrl = options["remote-repo-url"];
+
   return buildResponse(
     analysis,
     dockerfileAnalysis,
     excludeBaseImageVulns,
     names,
     ociDistributionMetadata,
+    remoteUrl,
   );
 }

lib/types.ts

@@ -102,6 +102,8 @@ export interface AutoDetectedUserInstructions {
 
 export interface ContainerTarget {
   image: string;
+  /** Set the remote URL for a container image image. */
+  remoteUrl?: string;
 }
 
 /**
@@ -225,6 +227,8 @@ export interface PluginOptions {
 
   /** The default is "false". */
   "collect-application-files": boolean | string;
+
+  "remote-repo-url"?: string;
 }
 
 export interface DepTreeDep {

test/system/plugin-option.spec.ts

@@ -60,3 +60,18 @@ it("provides imageName fact with imageNameAndDigest and imageNameAndTag scan opt
     ]),
   );
 });
+
+it("remoteUrl is set in ContainerTarget when remote-repo-url scan option is provided", async () => {
+  const fixturePath = getFixture(["/docker-archives", "alpine-arm64.tar"]);
+  const imagePath = `docker-archive:${fixturePath}`;
+
+  const pluginResponse = await plugin.scan({
+    path: imagePath,
+    "remote-repo-url": "https://github.com/org/my-repo-test",
+  });
+  pluginResponse.scanResults.forEach((scanResult) => {
+    expect(scanResult.target.remoteUrl).toEqual(
+      "https://github.com/org/my-repo-test",
+    );
+  });
+});