affected manifests: Use mather's Filter() in omnimatcher

The previous implementation used all matchers to find out whether package is vulnerable. This approach didn't work because each matcher is interested only in specific subset packages given by mather's filter. This commit add filer to omnimatcher to make sure only right matchers are used. Signed-off-by: Ales Raszka <[email protected]>
quay · Oct 1, 2020 · f8f0ff2 · f8f0ff2
1 parent aebd3a8
commit f8f0ff2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/omnimatcher/omnimatcher.go b/pkg/omnimatcher/omnimatcher.go
@@ -46,6 +46,10 @@ func New(m []driver.Matcher) OmniMatcher {
 // Vulnerable will call each Matcher's Vulnerable method until one returns true.
 func (om OmniMatcher) Vulnerable(ctx context.Context, record *claircore.IndexRecord, vuln *claircore.Vulnerability) (bool, error) {
 	for _, m := range om {
+		applicable := m.Filter(record)
+		if !applicable {
+			continue
+		}
 		match, err := m.Vulnerable(ctx, record, vuln)
 		if err != nil {
 			return false, err