feat(report): add image reference to report metadata (#9729)

Author: knqyf263

integration/registry_test.go

@@ -27,6 +27,7 @@ import (
 	"github.com/testcontainers/testcontainers-go"
 	"github.com/testcontainers/testcontainers-go/wait"
 
+	"github.com/aquasecurity/trivy/internal/testutil"
 	"github.com/aquasecurity/trivy/pkg/types"
 )
 
@@ -249,7 +250,7 @@ func TestRegistry(t *testing.T) {
 			runTest(t, osArgs, tt.golden, types.FormatJSON, runOptions{
 				wantErr:  tt.wantErr,
 				fakeUUID: "3ff14136-e09f-4df9-80ea-%012d",
-				override: overrideFuncs(overrideUID, func(_ *testing.T, want, got *types.Report) {
+				override: overrideFuncs(overrideUID, func(t *testing.T, want, got *types.Report) {
 					// Exclude ArtifactID from comparison because registry tests use random ports
 					// (e.g., localhost:54321/alpine:3.10), which causes RepoTags and the calculated
 					// Artifact ID to vary on each test run.
@@ -258,6 +259,7 @@ func TestRegistry(t *testing.T) {
 
 					want.ArtifactName = s
 					want.Metadata.RepoTags = []string{s}
+					want.Metadata.Reference = testutil.MustParseReference(t, s)
 					for i := range want.Results {
 						want.Results[i].Target = fmt.Sprintf("%s (%s)", s, tt.os)
 					}

integration/testdata/almalinux-8.json.golden

@@ -18,6 +18,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:almalinux-8"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:almalinux-8",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "a467f67a48d469e1975b7414f33f2cf87121d4cc59d2ee029ea58e6b81774769",

integration/testdata/alpine-310.json.golden

@@ -19,6 +19,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-310"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-310",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "0a80155a31551fcc1a36fccbbda79fcd3f0b1c7d270653d00310e6e2217c57e6",

integration/testdata/alpine-39-high-critical.json.golden

@@ -19,6 +19,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-39"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-39",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "c10d36fa368a7ea673683682666758adf35efe98e10989505f4f566b5b18538f",

integration/testdata/alpine-39-ignore-cveids.json.golden

@@ -19,6 +19,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-39"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-39",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "c10d36fa368a7ea673683682666758adf35efe98e10989505f4f566b5b18538f",

integration/testdata/alpine-39-skip.json.golden

@@ -18,6 +18,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-39"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-39",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "c10d36fa368a7ea673683682666758adf35efe98e10989505f4f566b5b18538f",

integration/testdata/alpine-39.json.golden

@@ -19,6 +19,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-39"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-39",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "c10d36fa368a7ea673683682666758adf35efe98e10989505f4f566b5b18538f",

integration/testdata/alpine-distroless.json.golden

@@ -18,6 +18,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:alpine-distroless"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:alpine-distroless",
     "ImageConfig": {
       "architecture": "amd64",
       "author": "github.com/chainguard-dev/apko",

integration/testdata/amazon-1.json.golden

@@ -18,6 +18,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:amazon-1"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:amazon-1",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "ef1b126795001e9b4bdc14a01180e4d8146282d279f53e05adfaa8195ecda20e",

integration/testdata/amazon-2.json.golden

@@ -18,6 +18,7 @@
     "RepoTags": [
       "ghcr.io/aquasecurity/trivy-test-images:amazon-2"
     ],
+    "Reference": "ghcr.io/aquasecurity/trivy-test-images:amazon-2",
     "ImageConfig": {
       "architecture": "amd64",
       "container": "e020a5508b9f809b29659128692cd634e3d4fba3f2c13d2029d797317b5c3a56",