github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,535 Commits 23 Branches 553 Tags
github-actions-image
Commit Graph
203 Commits
Author SHA1 Message Date
Daniel GrunbergerGitHubDaniel Grunberger
 		d6a47a82d2 improve cli output (#1347) 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-08-16 13:01:32 +03:00
DRAGON d946662e57 feat: migrate fatih/color to gchalk 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
 2023-08-11 04:31:39 +05:30
DRAGON2002andGitHub 9afae713ba feat: add table heading colors (#1321) 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
 2023-08-10 19:14:38 +03:00
DRAGON2002andGitHub 6c1a3fb89b feat: add short table (#1292) 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
Signed-off-by: DRAGON2002 <81813720+XDRAGON2002@users.noreply.github.com>
 2023-08-09 16:56:58 +03:00
DRAGON2002andGitHub df5f7db51d feat: change colors library (#1316) 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
 2023-08-09 09:48:34 +03:00
DRAGON2002andGitHub 869f0ea109 feat: add unicode table (#1285) 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
 2023-08-09 09:26:37 +03:00
rcohencyberarmorGitHubrcohencyberarmorDavid Wertenteil
 		4c9fec8ef4 Support scanning scope (#1293) 
* support scanning scope

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update white list

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* scope empty return control should tested

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego scope for system test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update test + mock

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add comment

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego library

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update opa utils - lots of file changes in this commit since armoapi-go bump up in opa-utils

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* move to temp k8s-interface - till PR in k8s-interface repo will approved

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface with released tag

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod in httphandler

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* PR review corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* change test name

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* scanning scope support for framework

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* test/mock adjustments after merge

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add more informative log to the user

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go.mod and go.sum of the http handler

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove framework just scanning scope not matched to framework config scope

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add system tests to workflow

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add system test to github workflow

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

---------

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
Signed-off-by: David Wertenteil <dwertent@armosec.io>
Co-authored-by: rcohencyberarmor <rcohen@armosec.io>
Co-authored-by: David Wertenteil <dwertent@armosec.io>
 2023-08-07 19:11:14 +03:00
David WertenteilandGitHub 6f07e63d3f Hotfix for version 2.3.8 (#1333) 
* update wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed tag

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* build arm64

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: revert release changes

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: adding build-image wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* adding platforms to wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-08-06 12:23:49 +03:00
David WertenteilandGitHub addd66bf72 Merge pull request #1327 from dwertent/hot-fix-submit-timestamp 
Fix submit time
 2023-08-04 19:24:27 +03:00
Amir MalkaandGitHub e2f96200e0 Code refactor (follow up to PR #1300) (#1323) 
* code refactor

Signed-off-by: Amir Malka <amirm@armosec.io>

* use scaninfo object in resource handler

Signed-off-by: Amir Malka <amirm@armosec.io>

---------

Signed-off-by: Amir Malka <amirm@armosec.io>
 2023-08-03 17:50:33 +03:00
David WertenteilandGitHub 7444acae11 Merge pull request #1312 from XDRAGON2002/issue_1282 
fix: negative compliance score
 2023-08-03 14:32:47 +03:00
David Wertenteil 226b4772a2 fix submit time 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-08-03 13:26:49 +03:00
Daniel GrunbergerGitHubDaniel GrunbergerVlad KlokunAmir MalkaDavid Wertenteil
 		5379b9b0a6 New output (#1320) 
* phase-1

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* factory

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* wip: feat(cli): add an image scanning command

Add a CLI command that launches an image scan. Does not scan images yet.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* wip: feat: add image scanning service

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore: include dependencies

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* wip: adjust image scanning service

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* wip: feat: use scanning service in CLI

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* use iface

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* touches

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* continue

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* add cmd

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* support single workload scan

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix conflict

Signed-off-by: Amir Malka <amirm@armosec.io>

* identifiers

* go mod

* feat(imagescan): add an image scanning command

This commit adds a CLI command and an associated package that scan
images for vulnerabilities.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

feat(imagescan): fail on exceeding the severity threshold

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore(imagescan): include dependencies

This commit adds the dependencies necessary for image scanning.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore(imagescan): add dependencies to httphandler

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* added unit tests

Signed-off-by: Amir Malka <amirm@armosec.io>

* merge

* more

* integrate img scan

* added unit tests

Signed-off-by: Amir Malka <amirm@armosec.io>

* more refactoring

Signed-off-by: Amir Malka <amirm@armosec.io>

* add scanned workload reference to opasessionobj

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix GetWorkloadParentKind

Signed-off-by: Amir Malka <amirm@armosec.io>

* remove namespace argument from pullSingleResource, using field selector instead

Signed-off-by: Amir Malka <amirm@armosec.io>

* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function

Signed-off-by: Amir Malka <amirm@armosec.io>

* changes

* changes

* fixes

* changes

* feat(imagescan): add an image scanning command

This commit adds a CLI command and an associated package that scan
images for vulnerabilities.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

feat(imagescan): fail on exceeding the severity threshold

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore(imagescan): include dependencies

This commit adds the dependencies necessary for image scanning.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore(imagescan): add dependencies to httphandler

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* chore(imagescan): create vuln db with dedicated function

Remove commented out code, too.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* docs(imagescan): provide package-level docs

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>

* finish merge

* image scan tests

* continue

* fixes

* refactor

* rm duplicate

* start fixes

* update gh actions

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* pr fixes

* fix test

* improvements

---------

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
Signed-off-by: Amir Malka <amirm@armosec.io>
Signed-off-by: David Wertenteil <dwertent@armosec.io>
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io>
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch>
Co-authored-by: Amir Malka <amirm@armosec.io>
Co-authored-by: David Wertenteil <dwertent@armosec.io>
 2023-08-03 12:09:33 +03:00
Amir MalkaGitHubDaniel Grunberger
 		0c019819ff Scanning a single resource (#1300) 
* add cmd

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>

* support single workload scan

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix conflict

Signed-off-by: Amir Malka <amirm@armosec.io>

* added unit tests

Signed-off-by: Amir Malka <amirm@armosec.io>

* added unit tests

Signed-off-by: Amir Malka <amirm@armosec.io>

* more refactoring

Signed-off-by: Amir Malka <amirm@armosec.io>

* add scanned workload reference to opasessionobj

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix GetWorkloadParentKind

Signed-off-by: Amir Malka <amirm@armosec.io>

* remove namespace argument from pullSingleResource, using field selector instead

Signed-off-by: Amir Malka <amirm@armosec.io>

* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix tests

Signed-off-by: Amir Malka <amirm@armosec.io>

* use ScanObject instead of workload identifier

Signed-off-by: Amir Malka <amirm@armosec.io>

* refactor logic after CR

Signed-off-by: Amir Malka <amirm@armosec.io>

---------

Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
Signed-off-by: Amir Malka <amirm@armosec.io>
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-08-01 14:07:31 +03:00
David WertenteilandGitHub d9e946cf6d reset head (#1306) 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-08-01 10:47:07 +03:00
DRAGON d2af7f47db fix: negative compliance score 
Signed-off-by: DRAGON <anantvijay3@gmail.com>
 2023-07-31 00:21:01 +05:30
Amir Malka ea3172eda6 time-based cached policies 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2023-07-10 10:54:56 +03:00
David WertenteilandGitHub abe0477249 Merge pull request #1265 from dwertent/update-submit-message 
Update submit message
 2023-07-06 09:39:04 +03:00
David WertenteilandGitHub 8fa15688fb Merge pull request #1260 from dwertent/deprecate-host-scanner 
Deprecated host-scanner from CLI
 2023-07-05 17:46:12 +03:00
David Wertenteil 780be45392 update submit message 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-07-05 10:38:59 +03:00
Oshrat NirandOshrat Nir 3c38021f7c Changed Assistance Remediation to Assited Remediation 
Signed-off-by: Oshrat Nir <oshratn@gmail.com>
 2023-07-04 13:13:50 +03:00
David Wertenteil 8989cc1679 Deprecated host-scanner 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-07-04 09:43:10 +03:00
Nitish ChauhanandGitHub 6cefada215 correcting the formating of the table in pdf output (#1244) 
* correcting the formatting of the table in pdf output

Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com>

* adding some starting unit tests

Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com>

* resolving the mod error

Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com>

---------

Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com>
 2023-06-04 15:21:07 +03:00
Alessio Greggi 7840ecb5da fix: move host-scanner to kubescape namespace 
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
 2023-05-24 09:45:12 +02:00
Amir Malka 987f97102d bump opa-utils version for memory optimizations 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2023-05-22 16:44:11 +03:00
YiscahLevySilas1 b7935276e3 Merge branch 'master' of github.com:kubescape/kubescape into new-threshold-flag 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2023-04-27 15:56:12 +03:00
YiscahLevySilas1 d6edd818b8 add compliance score to new field in controls for backward compatibility 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2023-04-27 15:53:47 +03:00
YiscahLevySilas1andGitHub 95e88f8581 add compliance-threshold, deprecate fail-threshold (#1197) 
* add compliance-threshold, deprecate fail-threshold

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* update opa-utils version

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* update opa-utils version for fix in compliance score

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

---------

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2023-04-24 15:33:30 +03:00
David WertenteilandGitHub ecf770c756 Merge pull request #1189 from dwertent/hotfix-2.2.6-add_data 
fix(submit): set default report time
 2023-04-20 16:39:51 +03:00
YiscahLevySilas1 344e9188f6 add compliance-threshold, deprecate fail-threshold 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2023-04-17 16:08:38 +03:00
Hollow Man 5c1a41e920 nit 
Signed-off-by: Hollow Man <hollowman@opensuse.org>
 2023-04-13 10:54:25 +03:00
Hollow Man 0b8d207615 Add more error check 
Signed-off-by: Hollow Man <hollowman@opensuse.org>
 2023-04-13 10:54:25 +03:00
Hollow Man 539b6c51b9 Add unit testcase 
Signed-off-by: Hollow Man <hollowman@opensuse.org>
 2023-04-13 10:54:25 +03:00
Hollow Man 19ca590e2f S1023: redundant break statement (gosimple) 
Signed-off-by: Hollow Man <hollowman@opensuse.org>
 2023-04-13 10:54:25 +03:00
Hollow Man 4de50f82c0 feat(sarif): add fix object in generated reports 
Signed-off-by: Hollow Man <hollowman@opensuse.org>
 2023-04-13 10:54:19 +03:00
David Wertenteil 91c13381b2 set default report time 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-04-09 11:15:06 +02:00
yuleibandGitHub 875deb7ec3 adding compliance score updates (#1181) 
Signed-off-by: Yuval Leibovich <yuvall@armosec.io>
 2023-04-04 16:03:40 +03:00
Frederic BIDONandMatthias Bertschy dee3a10bac test(utils): introduced internal/testutils package to factorize testing utilities 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

Conflicts:
	core/pkg/hostsensorutils/hostsensordeploy_test.go
 2023-03-24 11:15:25 +01:00
David WertenteilandGitHub b4180b34e7 core(logs): Enhance logs (#1158) 
* adding ks version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Initialize scanInfo

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* print if logger level is lower than warning

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: scan default frameworks when scanning files

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change print to log

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: Add end-line after last log

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: silent spinner when logger is warn

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-20 17:49:51 +02:00
David Wertenteil 6671ac46f4 change failed to submit message 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-16 09:42:39 +02:00
David Wertenteil ec4a098b1c replace error by warning 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-15 17:17:29 +02:00
Frederic BIDON 306da021db test(reports): adds unit test to the report receiver 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

replace mock

Signed-off-by: Daniel-GrunbergerCA@armosec.com
 2023-03-07 19:59:31 +01:00
David WertenteilandGitHub 03b0147e39 Merge pull request #1130 from dwertent/update-utm-link-v2 
docs(links): Update URLs
 2023-03-06 14:08:25 +02:00
Frederic BIDON 7174f49f87 chore(lintin): run another pass of linting with the rules already in place 
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
 2023-03-05 20:16:37 +01:00
David Wertenteil 0698c99241 wip: update UTMs & display UTM only on first scan 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 23:05:38 +02:00
David Wertenteil c2b0e5c0a2 Do not display URL when message is empty 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 23:04:26 +02:00
David Wertenteil 6c54aff451 wip: removed unused code 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-03-04 22:46:20 +02:00
David Wertenteil ac2aa764a4 marking structs that are implementing IPrinter 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-24 09:18:54 +02:00
David Wertenteil d02bef62d3 wip: re-arange struct 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-24 09:17:31 +02:00
David WertenteilandGitHub 915fa919b2 Fix HTML output (#1111) 
* Fixed HTML template

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Adding HTML output format example

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-02-21 13:55:12 +02:00