[LarsLaskowski]

Pull Request

📖 Description

F-024 (a failing item aborting the scan batch) and F-025 (active findings lost on a transient feed error) are already fixed on main, but two paths still had no regression test. This change adds three tests: a two-image and a two-instance batch where the first item fails before its inner try and the other item must still be scanned to completion, and an observed image whose derived .NET finding must stay active when the release feed fails. The SaveChangesFailingDbContext test double gets a FailOnSaveAttempt option that fails exactly one save attempt. No production code changes; each test was shown to fail when its guard is removed.

🎫 Issues

Closes #19

💬 Reviewer Notes

Tests only. The batch order of the scan is not fixed, so the tests assert on "the item that failed" and "the other one", never on which comes first. While writing them, two related defects surfaced and were filed separately: #384 and #385.

📑 Test Plan

Three new tests in ImageScanOrchestratorTests and RuntimeContainerScanOrchestratorTests. Full suite passes (1008 + 21), overall line coverage 88.3 %.

✅ Checklist

• I have added or updated Unit Tests for the change.
• I have tested my changes.
• I have run Format and Build from .squad/stack.md, and the Analyzer gate reports no diagnostic in a changed file.
• The Coverage gate in .squad/stack.md passes (line coverage on new or changed production code and overall).
• I have updated the project documentation (README.md, ARCHITECTURE.md) to reflect my changes.
• I have read the CONTRIBUTING documentation and followed the project's code style guidelines.
• New dependencies, if any, were added the way Dependencies in .squad/stack.md prescribes.
• The C# rules in csharp.instructions.md are followed.

⏭ Next Steps

• A failed batch item leaves its tracked changes in the shared scan context #384 A failed batch item leaves its tracked changes in the shared scan context
• Runtime derived base-runtime findings disappear when the release feed or image inspect fails #385 Runtime derived base-runtime findings disappear when the release feed or image inspect fails

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud