github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,196 Commits 23 Branches 553 Tags
buildx
Commit Graph
614 Commits
Author SHA1 Message Date
Matthias Bertschy 825694ade1 do not skip on location resolver error 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-10 10:25:44 +01:00
Fernando-hub527 8985bbe3a9 refactor: update Maroto configuration file location 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-06 18:07:57 -03:00
Matthias Bertschy 1ffca5648e delete TableObject.getSeverityColor to please CI 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-06 07:56:07 +01:00
Fernando-hub527 76b1ecb022 refactor: create a method that returns the pdf row 
Return a struct with the data for ease of use

Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:52:50 -03:00
Fernando-hub527 fc69a3692e refactor: remove unused code 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:47:28 -03:00
Fernando-hub527 e159458129 test:validate creation of report pdf 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:45:01 -03:00
Fernando-hub527 b259f117ff refactor: create a report template with maroto/v2 
Separate template creation from application logic

Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:36:39 -03:00
Matthias Bertschy 4215771134 fix helm detection in sarif printer 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-31 15:23:15 +01:00
Eng Zer JunandGitHub 2005010568 Replace golang.org/x/exp/slices with slices from stdlib (#1783) 2025-01-17 20:51:08 +02:00
Amir Malka 14ffe35437 add trigger by indication in posture report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-01-09 16:13:29 +02:00
Matthias Bertschy 70a9380966 fix go imports 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 12:14:56 +01:00
Matthias Bertschy 600f19406e enable offline mode with env KS_OFFLINE 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 10:33:19 +01:00
Matthias Bertschy 219582b92a add debug log on resource fetch with count 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-12-11 07:35:36 +01:00
needsure c585abc21a chore: fix some function name in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-12-06 13:41:14 +08:00
Ben 4f3ef49f99 Implementing capability to print out the "print" statements of the rego 
Signed-off-by: Ben <ben@armosec.io>
 2024-11-20 00:10:18 +02:00
jnathangreeg 7735087937 fix the repo scan get stucked bug 
Signed-off-by: jnathangreeg <jonathang@armosec.io>
 2024-11-19 15:13:31 +02:00
jnathangreeg 6f47f8dae0 adding a second term for getFilesFromTree for makeing sure we scaning the right path 
Signed-off-by: jnathangreeg <jonathang@armosec.io>
 2024-11-11 19:29:22 +02:00
Matthias Bertschy d5b8532e40 fix include/exclude NS for SA discovered via CRB 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-23 18:42:01 +02:00
Matthias Bertschy c7d3105ca5 use proper params in pager call 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-10 11:58:06 +02:00
Matthias Bertschy 2d77ea7b62 use pager.EachListItem to filter parented resources 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-03 16:41:12 +02:00
David Wertenteil 0ee98351c0 fix scanning unsupported clouds 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-26 15:45:19 +03:00
Matthias Bertschy 840162c865 fix yamlhandler deleting too many lines during fix 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-05-21 08:48:01 +02:00
David Wertenteil b2b37f6abc Mask all containers data 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-09 19:08:09 +03:00
David Wertenteil 3cbd2c458d fix scanning repo 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-06 16:22:38 +03:00
fanqiaojun bd35d521f2 Fix some comments 
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net>
 2024-04-13 15:42:01 +08:00
Massimiliano Giovagnoli e0f2944fc8 chore(core/pkg/resultshandling): add control id to pdf output 
Add a new column in the PDF output to reference each control that has
been executed as control ID.

Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
 2024-04-10 17:11:30 +02:00
Matthias BertschyandGitHub bda7a17f41 Merge pull request #1658 from needsure/master 
chore: fix function names in comment
 2024-04-09 11:47:07 +02:00
needsure dee6ed96f8 chore: fix function names in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-04-09 16:33:24 +08:00
Matthias Bertschy d27284b6f6 remove api calls from scan repo 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-09 07:37:58 +02:00
Amir Malka 8a671b9658 fix panic when submitting report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-19 11:39:26 +02:00
Matthias BertschyandGitHub 708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Amir MalkaandGitHub 56a9d9a7f3 fix panic when error is returned from SubmitReport (#1640) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-17 14:08:04 +02:00
David Wertenteil 0e0e1ed6fb remove repeating fixes 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-11 09:22:03 +02:00
mmmmmmorty f5e110c212 Fix bug for no matches of yalib in one file mapping 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-08 10:50:39 +02:00
Alfredo GarciaandGitHub fad8f2b272 Add Vulnerability scanning report to the summaryDetails section (#1615) 
* Add Vulnerability scanning report to the summaryDetails section

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

* Updating the opa-utils dependency version

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

---------

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>
 2024-03-01 14:59:23 +02:00
MMMMMMortyandGitHub bc33f10d0a feat: Add the debugging ability for scanning Helm chart (#1215) 
* Fix issue 11552

Signed-off-by: MMMMMMorty <465346562@qq.com>

* Add helm chart mapping node for sarif printer

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add MappingNodes to getWorkloadFromHelmChart

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* clear the code to mappingnode and parseFile

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add input to fixPathsToString

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add fixs for error message

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add solution for multiple files in one yaml helm chart file

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add parseFile tests

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

---------

Signed-off-by: MMMMMMorty <465346562@qq.com>
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-01 14:31:51 +02:00
David Wertenteil 533edc6d05 Fixing exceptions for regovector objects 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-29 08:42:32 +02:00
Matthias Bertschy ac6c5ca570 image scan add schema v1 support 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-02-28 10:25:16 +01:00
David WertenteilandGitHub ea7a8bef94 Fix/backlog (#1613) 
* Many minor improvements

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Handle fw scan error

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove prometheus docs

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fix workload threshold

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed units

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-26 22:42:41 +02:00
David Wertenteil 05903e34ff Handle unknown fw 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 17:05:38 +02:00
David Wertenteil d01a7977ae Remove "%" from the print 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 14:26:51 +02:00
YiscahLevySilas1 1b59b6a35f fix backslashes 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-01-16 11:59:28 +02:00
Matthias Bertschy 6a6e4181bd fetch Rekor before cosign validation 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-15 14:33:39 +01:00
Amir MalkaandGitHub 4b8786bcaa checking for compatible policy rules before pulling k8s resources; failing to pull some k8s resource should not fail the entire scan (#1578) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-01-09 09:44:45 +02:00
David WertenteilandGitHub 3634499e11 Fixed filepath test (#1576) 
* remove unstable tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* skip tests on windows

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 23:00:16 +02:00
David Wertenteil a0e6ebe0e0 filepath test 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 18:00:45 +02:00
David WertenteilandGitHub 65a557db90 fixed test (#1573) 
* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign-release version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed filepath related tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* failed windows tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed cosign version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update go version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change actor

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Cosign use secret

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 16:26:34 +02:00
VaibhavMalik4187 155889a479 Added missing tests for locationresolver 
Wrote new tests to cover the unhandled statements in the
`NewFixPathLocationResolver` and `ResolveLocation` functions.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-12-23 17:23:07 +05:30
Matthias Bertschy 1b260f60cc patch GHSA-3f2q-6294-fmq5 by switching to chainguard's fork 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-11 07:19:05 +01:00
VaibhavMalik4187 de2e86dc6e Fixed crash when running the scan command 
Updated the `getSortPackageScores` function to fix the crash in the scan
command.

Fixes: https://github.com/kubescape/kubescape/issues/1553

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-30 15:12:33 +05:30