github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,287 Commits 23 Branches 553 Tags
fix-release-workflow
Commit Graph
374 Commits
Author SHA1 Message Date
Matthias Bertschy 1bd729cf83 fix go tidy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-09-02 14:45:12 +02:00
Matthias Bertschy ca66ccb33d replace olekukonko/tablewriter with jedib0t/go-pretty 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-09-01 16:38:42 +02:00
dependabot[bot] 4a6480c8b4 Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.7.8 to 1.7.9.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.7.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-21 17:14:35 +02:00
Matthias Bertschy e41b5d77a0 bump helm.sh/helm/v3 to 3.18.5 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-08-18 10:28:34 +02:00
Matthias Bertschy a2361fd155 Merge pull request #1853 from kubescape/dependabot/go_modules/github.com/containerd/containerd/v2-2.0.5 
Bump github.com/containerd/containerd/v2 from 2.0.4 to 2.0.5
 2025-07-28 14:26:07 +02:00
dependabot[bot] 5bd4beb41f Bump github.com/containerd/containerd/v2 from 2.0.4 to 2.0.5 
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.0.4 to 2.0.5.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.0.4...v2.0.5)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.0.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-28 14:14:59 +02:00
dependabot[bot] be49d9b7be Bump helm.sh/helm/v3 from 3.17.3 to 3.17.4 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.17.3 to 3.17.4.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.17.3...v3.17.4)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.17.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-28 14:02:05 +02:00
dependabot[bot] 1f8afecea8 Bump github.com/cloudflare/circl from 1.5.0 to 1.6.1 
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-28 13:33:52 +02:00
dependabot[bot] f80c9d947d Bump github.com/go-viper/mapstructure/v2 in /httphandler 
Bumps [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.3.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-28 13:18:52 +02:00
dependabot[bot] 01531b6276 Bump github.com/open-policy-agent/opa from 1.3.0 to 1.4.0 
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-28 12:20:18 +02:00
Yehudah Tor d2bedc1d2b added urls 
Signed-off-by: Yehudah Tor <yehudahtor@gmail.com>
 2025-07-27 13:50:47 +03:00
Matthias Bertschy 6ed3e408be check scanInfo.Submit in HandleResults to not submit by default 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-06-30 08:16:41 +02:00
Ben 2bd686131e Incorporating review 
Signed-off-by: Ben <ben@armosec.io>
 2025-06-10 14:32:26 +03:00
Matthias Bertschy fa05dcd00d go.mod massaging 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-05-23 16:02:15 +02:00
dependabot[bot] 45f60b6fe0 Bump golang.org/x/net from 0.37.0 to 0.38.0 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-28 14:03:44 +02:00
dependabot[bot] 80e419df24 Bump helm.sh/helm/v3 from 3.14.4 to 3.17.3 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.4 to 3.17.3.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.14.4...v3.17.3)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.17.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-15 12:22:19 +02:00
Matthias Bertschy a4897304e8 merge labels and annotations in RetryOnConflict 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-04-14 15:36:34 +02:00
Matthias Bertschy 31ed7d5160 upgrade open-policy-agent to 1.x 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-04-10 17:17:08 +02:00
Matthias Bertschy 0655d0496b check for nil map in merge methods 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-03-28 12:10:38 +01:00
dependabot[bot] 4d8a3f51e3 Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 10:30:02 +01:00
Matthias Bertschy f13ded61bf Bump github.com/containerd/containerd to 1.7.27 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-03-20 13:05:17 +01:00
dependabot[bot] 2b28911db0 Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-03-04 09:28:14 +01:00
Amir Malka 667e5e8258 fix score calculation for framework with all controls in status irrelevant (#1802) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-03-03 15:20:14 +02:00
dependabot[bot] 2458f2ceb9 Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.2 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-25 07:58:42 +01:00
Amir Malka f57948ad97 deprecate control name in exception policies (#1795) 
* deprecate control name in posture exception policies

Signed-off-by: Amir Malka <amirm@armosec.io>

* deprecate control name in posture exception policies

Signed-off-by: Amir Malka <amirm@armosec.io>

* deprecate control name in posture exception policies

Signed-off-by: Amir Malka <amirm@armosec.io>

* deprecate control name in posture exception policies

Signed-off-by: Amir Malka <amirm@armosec.io>

---------

Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-02-20 10:27:27 +02:00
Matthias Bertschy ae37fdc295 fix go tidy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-14 16:19:42 +01:00
Ruslan Semagin fe7dad4560 Refactor: propagate context from main to avoid redundant context creation 
- Introduced a single context in main() to handle interrupt signals (os.Interrupt, syscall.SIGTERM).
- Removed repetitive context creation in the program by reusing the propagated context.
- Improved code readability and maintainability by centralizing context management.
- Ensured consistent handling of graceful shutdown across the program.

Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com>
 2025-02-11 19:52:48 +03:00
Matthias Bertschy 815c87b532 implement reviews from DW 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-07 12:16:35 +01:00
Sanskarzz 82120f9d31 added support for exception rules 
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
 2025-02-07 12:15:56 +01:00
Fernando-hub527 13cf34bffd refactor: update Maroto version to v2 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:31:22 -03:00
Matthias Bertschy e16c4cc9b4 fix go.mod for httphandler 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-16 15:20:58 +01:00
Amir Malka d966b0acbc update opa-utils 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-01-09 16:35:53 +02:00
Amir Malka 14ffe35437 add trigger by indication in posture report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-01-09 16:13:29 +02:00
Matthias Bertschy 70a9380966 fix go imports 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 12:14:56 +01:00
Matthias Bertschy f706d126f5 fix error in log about failed resource update 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 11:52:34 +01:00
Matthias Bertschy 600f19406e enable offline mode with env KS_OFFLINE 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 10:33:19 +01:00
Matthias Bertschy 5e0b25b04a update go-git 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 09:42:36 +01:00
Matthias Bertschy 1ed1bb11f2 bump vulnerable deps 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-12-20 16:31:50 +01:00
dependabot[bot] d6030a9c03 Bump golang.org/x/crypto from 0.27.0 to 0.31.0 in /httphandler 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-13 14:18:38 +00:00
Ben 4f3ef49f99 Implementing capability to print out the "print" statements of the rego 
Signed-off-by: Ben <ben@armosec.io>
 2024-11-20 00:10:18 +02:00
Matthias Bertschy 5b9c6491de fix mod tidy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-11-18 10:34:28 +01:00
Matthias Bertschy 90c359533f override docker/docker upgrade 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-11-12 14:46:29 +01:00
dependabot[bot] c4935671fe Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in /httphandler 
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-12 10:32:57 +00:00
dependabot[bot] 12c6f34fe7 Bump github.com/containers/common from 0.59.0 to 0.60.4 in /httphandler 
Bumps [github.com/containers/common](https://github.com/containers/common) from 0.59.0 to 0.60.4.
- [Release notes](https://github.com/containers/common/releases)
- [Commits](https://github.com/containers/common/compare/v0.59.0...v0.60.4)

---
updated-dependencies:
- dependency-name: github.com/containers/common
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-03 05:21:42 +00:00
Matthias Bertschy f64d5a03af bump opa and go-logger 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-09-30 17:40:38 +02:00
Matthias Bertschy b7c91c238d force grpc 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-09-04 21:57:00 +02:00
dependabot[bot] 729efcb8c3 Bump github.com/docker/docker in /httphandler 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.4+incompatible to 26.1.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v26.1.4...v26.1.5)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-21 10:24:57 +00:00
dependabot[bot] eea4cc0b49 Bump github.com/docker/docker in /httphandler 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.0+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v26.1.0...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 19:43:32 +00:00
ttimonen 7507f58306 refactor(handler) Simplify the scan http handler concurrency. 
In particular,
Replace scanResponseChan struct with a reply channel in req.
This removes one chokepoint with tracking a map of channel with a mutex wrapping by not sharing data across different requests and
 makes it easier to reason about the correctness of the behavior.

Other changes are mostly cosmetic to group your operations related to
the primitives you are operating on, reducing the average lifetime of
a local variable (matters mostly for humans; compilers are very good at this nowadays).

Also this is net benefical by reducing LOCs by 45.

Signed-off-by: ttimonen <toni.timonen@iki.fi>
 2024-07-07 22:44:35 +00:00
ttimonen 48ad56a2ef Implement unit-test for scan handler. 
It plays wtih channels and goroutines, so having it
behave correctly is not completely trivial and test
worthy.

Signed-off-by: ttimonen <toni.timonen@iki.fi>
 2024-07-07 22:40:58 +00:00