Display 'no vulns found' for Dockerfiles (#92)

Co-authored-by: Michael Long <mlongii@amazon.com>

Author: bluesentinelsec

entrypoint/entrypoint/dockerfile.py

@@ -331,6 +331,10 @@ def write_dockerfile_report_md(inspector_scan_path, dst_file):
         row = vuln_to_markdown_row(vuln)
         markdown_report += row
 
+    if len(dockerfile_vulns) == 0:
+        row = ":green_circle: Amazon Inspector scanned for security issues in Dockerfiles and no issues were found."
+        markdown_report += row
+
     logging.info(f"writing Dockerfile vulnerability markdown report to: {dst_file}")
     with open(dst_file, "w") as f:
         f.write(markdown_report)

entrypoint/test.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+python3 main.py \
+    --artifact-type="container" \ 
+    --artifact-path="alpine:latest" \
+    --display-vuln-findings="enabled" \
+    --out-sbom="./sbom.json" \
+    --out-scan="inspector_scan_.json" \
+    --out-scan-csv="inspector_scan_.csv" \
+    --out-scan-markdown="inspector_scan_.md" \
+    --out-dockerfile-scan-csv="inspector_dockerfile_scan_.csv" \
+    --out-dockerfile-scan-md="inspector_dockerfile_scan_.md" \
+    --sbomgen-version="1.4.0"
+