Matthias Bertschy
3623e55433
feat: add image column to vulnerability scanning table output
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2026-02-02 17:51:43 +01:00
majiayu000 and Claude Opus 4.5
46eb266064
feat: add labels-to-copy flag to copy workload labels to reports
...
Add a new --labels-to-copy CLI flag that allows users to specify which
labels from Kubernetes workloads should be extracted and included in
scan reports. This makes it easier to tie scan results back to app
teams or repositories by including relevant labels like 'app', 'team',
or 'environment' in the report output.
Changes:
- Add LabelsToCopy field to ScanInfo and OPASessionObj structs
- Add --labels-to-copy flag to scan command
- Add ResourceLabels field to PostureReportWithSeverity for JSON output
- Implement extractResourceLabels function to extract specified labels
- Add unit tests for label extraction functionality
Fixes #1660
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
Signed-off-by: majiayu000 <1835304752@qq.com >
2025-12-31 06:20:29 +08:00
Matthias Bertschy
df37457504
Update cosign package to v3 and adjust go.mod dependencies
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2025-12-09 11:24:29 +01:00
copilot-swe-agent[bot] and matthyx
1dd6d7a1b3
Address code review feedback: nil check and trailing whitespace
...
Co-authored-by: matthyx <20683409+matthyx@users.noreply.github.com >
2025-12-03 16:46:11 +00:00
copilot-swe-agent[bot] and matthyx
d88bc067e2
Add severity to controls in results section as well
...
Co-authored-by: matthyx <20683409+matthyx@users.noreply.github.com >
2025-12-03 16:40:48 +00:00
copilot-swe-agent[bot] and matthyx
742e3bb67f
Add severity field to controls in JSON output
...
Co-authored-by: matthyx <20683409+matthyx@users.noreply.github.com >
2025-12-03 16:31:57 +00:00
Matthias Bertschy
ff96edae4d
use grype v0.99.1
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2025-09-17 10:11:19 +02:00
fanqiaojun
bd35d521f2
Fix some comments
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-13 15:42:01 +08:00
David Wertenteil
3e2314a269
Bump v3 ( #1449 )
...
* bump version
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* change default view
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tests
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed go mod
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-10-22 17:43:51 +03:00
72b64127c7
Restructure img cmd ( #1398 )
...
* feat: add kubescape patch command
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* update patch command output format
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* fix patch command logic
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* update docs & minor changes
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* restructure cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fix tests
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* readme
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fix version code
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* go mod
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Anubhav Gupta <mail.anubhav06@gmail.com >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-10-22 14:51:39 +03:00
David Wertenteil
92449bf564
core(cmd): adding corrections to cmd ( #1357 )
...
* adding corrections to cmd
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* remove decorative line
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: changed results indicator
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* replace status test with icons
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* print workloads in a different line
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update display
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* deprecate commands
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* removed unused functions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tests
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update cloud provider detection
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* rename column name
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-29 09:50:22 +03:00
5379b9b0a6
New output ( #1320 )
...
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
Signed-off-by: Amir Malka <amirm@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 12:09:33 +03:00
Amir Malka
df39e10300
Statuses ( #1016 ) ( #1082 )
...
New statuses
2023-02-14 15:00:21 +02:00
Amir Malka
0c87ff6843
Initial implementation of fix command ( #898 )
...
* Fix command initial implementation
2023-01-11 20:18:37 +02:00
suhasgumma
b9caaf5025
Add logs for some formats
2022-12-22 15:00:59 +02:00
Frederic BIDON
4335e6ceac
chore(style): renamed versioned packages to stick to idiomatic conventions
...
* fixes : #967
Signed-off-by: Frederic BIDON <fredbi@yahoo.com >
2022-12-13 14:27:21 +01:00
Amir Malka
2b3fcca7e8
omit raw resources flag in json output
2022-11-16 12:15:17 +02:00
+14
d1c759f04f
Hot fix - Revert report structure ( #776 )
...
* Fix issue for scanning list obj
* Fix go mod in httphandler pkg
* Broken links fix in roadmap.md
Planning, backlog, and wishlist links were not taking to the required section.
* override infoMap only if it's not nil
* improved icon of kubescape in readme
* Support scanning several files
* gramatical improvements
* docs(readme): Star → star
* Fix issues according to review
* Handle with issues caused by updating opa-utils
* Fix scanning ListObj following reviews
* Update core/pkg/resourcehandler/filesloader.go
Co-authored-by: Vlad Klokun <vladklokun@users.noreply.github.com >
* Update completion.go
* Added fixed control input
* update go.mod
* Print chart name log when fail to generate
* Change formatting to %s
* Added resource prioritization information, raw resource will be sent on the result object
* Merging typo fixes from master (#772 )
* greetings
* Update aws.sh
simplified the comment
* typo: In the title and h1 element
Their was a typo in index.html file.
* punctuation changes
* docs : added gitpod badge in readme.md
* fixed typos
* some grammar mistake is corrected inPULL_REQUEST_TEMPLATE.md file
* Updated README.md file
Added link to CONTRIBUTING.md file in a line in README.
* Added link to code of conduct file
I have added link to the code of conduct file and fixed some problems in the Readme file.
* Fixed readme
* Added alpine tag
Adding alpine tag instead of latest and removing repeating commands
* roadmap.md file is modified
* Automatically Close "Typo" labelled Issue
* build.py is modified
* modified PR template
* Fixed some typos in feature_request.md
"." at the end of the headings were missing and all the text were in same line.
Now this gives a clear and concise view of the texts.
* fixed the typo in docs/index.html
Found and fixed typo in the 'alt' attribute of img tag
* Update PULL_REQUEST_TEMPLATE.md
Co-authored-by: Krishna Agarwal <dmkrishna.agarwal@gmail.com >
Co-authored-by: Saswata Senapati <74651639+saswat16@users.noreply.github.com >
Co-authored-by: Rahul Singh <110548934+rahuldhirendersingh@users.noreply.github.com >
Co-authored-by: deepuyadav004 <deepuyadavze@gmail.com >
Co-authored-by: kartik <97971066+kartikgajjar7@users.noreply.github.com >
Co-authored-by: Rounak-28 <95576871+Rounak-28@users.noreply.github.com >
Co-authored-by: pwnb0y <vickykr07@yahoo.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
Co-authored-by: Saptarshi Sarkar <saptarshi.programmer@gmail.com >
Co-authored-by: Rahul Surwade <93492791+RahulSurwade08@users.noreply.github.com >
Co-authored-by: Suhas Gumma <43647369+suhasgumma@users.noreply.github.com >
Co-authored-by: Kamal Nayan <95926324+legendarykamal@users.noreply.github.com >
Co-authored-by: TarangVerma <90996971+TarangVerma@users.noreply.github.com >
Co-authored-by: avikittu <65793296+avikittu@users.noreply.github.com >
* update logger version (#773 )
* Fixed: Kubescape fails to authenticate remote private Github repo (#721 )
* grammar error fixer in CONTRIBUTING.md
* scanning private git repository is available
* giturl to gitapi
* NO TOKEN error functionality added
* Used GetToken method of giturl.IGitAPPI for auth
Co-authored-by: satyam kale <satyamkale271@gmail.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
* bump opa-utils to 181
* Option to force enable color output (closes #560 ) (#767 )
* Option to force enable color output (closes #560 )
(cherry picked from commit 4f951781ee8dd6bb451ac7d159787f47e4b07379)
* Update go.mod
* Update host scanner image (#774 )
* update logger version
* update scanner image
* Remove windows extension build (#775 )
* update logger version
* update scanner image
* remove windows exe extension
* commened out prioritization logic
Co-authored-by: Moshe-Rappaport-CA <moshep@armosec.io >
Co-authored-by: Moshe Rappaport <89577611+Moshe-Rappaport-CA@users.noreply.github.com >
Co-authored-by: Om Raut <33827410+om2137@users.noreply.github.com >
Co-authored-by: Kamal Nayan <95926324+legendarykamal@users.noreply.github.com >
Co-authored-by: Vlad Klokun <vladklokun@users.noreply.github.com >
Co-authored-by: Chirag Arora <84070677+Chirag8023@users.noreply.github.com >
Co-authored-by: shm12 <shmuelb@armosec.io >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: Krishna Agarwal <dmkrishna.agarwal@gmail.com >
Co-authored-by: Saswata Senapati <74651639+saswat16@users.noreply.github.com >
Co-authored-by: Rahul Singh <110548934+rahuldhirendersingh@users.noreply.github.com >
Co-authored-by: deepuyadav004 <deepuyadavze@gmail.com >
Co-authored-by: kartik <97971066+kartikgajjar7@users.noreply.github.com >
Co-authored-by: Rounak-28 <95576871+Rounak-28@users.noreply.github.com >
Co-authored-by: pwnb0y <vickykr07@yahoo.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
Co-authored-by: Saptarshi Sarkar <saptarshi.programmer@gmail.com >
Co-authored-by: Rahul Surwade <93492791+RahulSurwade08@users.noreply.github.com >
Co-authored-by: Suhas Gumma <43647369+suhasgumma@users.noreply.github.com >
Co-authored-by: TarangVerma <90996971+TarangVerma@users.noreply.github.com >
Co-authored-by: avikittu <65793296+avikittu@users.noreply.github.com >
Co-authored-by: satyam kale <satyamkale271@gmail.com >
Co-authored-by: Aditya Pratap Singh <adityapratapsingh51@gmail.com >
2022-09-05 12:08:19 +03:00
+14
72f9c6d81b
Fixed InfoMap usage ( #680 )
...
* Fix issue for scanning list obj
* Fix go mod in httphandler pkg
* Broken links fix in roadmap.md
Planning, backlog, and wishlist links were not taking to the required section.
* override infoMap only if it's not nil
* improved icon of kubescape in readme
* Support scanning several files
* gramatical improvements
* docs(readme): Star → star
* Fix issues according to review
* Handle with issues caused by updating opa-utils
* Fix scanning ListObj following reviews
* Update core/pkg/resourcehandler/filesloader.go
Co-authored-by: Vlad Klokun <vladklokun@users.noreply.github.com >
* Update completion.go
* Added fixed control input
* update go.mod
* Print chart name log when fail to generate
* Change formatting to %s
* Added resource prioritization information, raw resource will be sent on the result object
* Merging typo fixes from master (#772 )
* greetings
* Update aws.sh
simplified the comment
* typo: In the title and h1 element
Their was a typo in index.html file.
* punctuation changes
* docs : added gitpod badge in readme.md
* fixed typos
* some grammar mistake is corrected inPULL_REQUEST_TEMPLATE.md file
* Updated README.md file
Added link to CONTRIBUTING.md file in a line in README.
* Added link to code of conduct file
I have added link to the code of conduct file and fixed some problems in the Readme file.
* Fixed readme
* Added alpine tag
Adding alpine tag instead of latest and removing repeating commands
* roadmap.md file is modified
* Automatically Close "Typo" labelled Issue
* build.py is modified
* modified PR template
* Fixed some typos in feature_request.md
"." at the end of the headings were missing and all the text were in same line.
Now this gives a clear and concise view of the texts.
* fixed the typo in docs/index.html
Found and fixed typo in the 'alt' attribute of img tag
* Update PULL_REQUEST_TEMPLATE.md
Co-authored-by: Krishna Agarwal <dmkrishna.agarwal@gmail.com >
Co-authored-by: Saswata Senapati <74651639+saswat16@users.noreply.github.com >
Co-authored-by: Rahul Singh <110548934+rahuldhirendersingh@users.noreply.github.com >
Co-authored-by: deepuyadav004 <deepuyadavze@gmail.com >
Co-authored-by: kartik <97971066+kartikgajjar7@users.noreply.github.com >
Co-authored-by: Rounak-28 <95576871+Rounak-28@users.noreply.github.com >
Co-authored-by: pwnb0y <vickykr07@yahoo.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
Co-authored-by: Saptarshi Sarkar <saptarshi.programmer@gmail.com >
Co-authored-by: Rahul Surwade <93492791+RahulSurwade08@users.noreply.github.com >
Co-authored-by: Suhas Gumma <43647369+suhasgumma@users.noreply.github.com >
Co-authored-by: Kamal Nayan <95926324+legendarykamal@users.noreply.github.com >
Co-authored-by: TarangVerma <90996971+TarangVerma@users.noreply.github.com >
Co-authored-by: avikittu <65793296+avikittu@users.noreply.github.com >
* update logger version (#773 )
* Fixed: Kubescape fails to authenticate remote private Github repo (#721 )
* grammar error fixer in CONTRIBUTING.md
* scanning private git repository is available
* giturl to gitapi
* NO TOKEN error functionality added
* Used GetToken method of giturl.IGitAPPI for auth
Co-authored-by: satyam kale <satyamkale271@gmail.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
* bump opa-utils to 181
* Option to force enable color output (closes #560 ) (#767 )
* Option to force enable color output (closes #560 )
(cherry picked from commit 4f951781ee8dd6bb451ac7d159787f47e4b07379)
* Update go.mod
* Update host scanner image (#774 )
* update logger version
* update scanner image
Co-authored-by: Moshe-Rappaport-CA <moshep@armosec.io >
Co-authored-by: Moshe Rappaport <89577611+Moshe-Rappaport-CA@users.noreply.github.com >
Co-authored-by: Om Raut <33827410+om2137@users.noreply.github.com >
Co-authored-by: Kamal Nayan <95926324+legendarykamal@users.noreply.github.com >
Co-authored-by: Vlad Klokun <vladklokun@users.noreply.github.com >
Co-authored-by: Chirag Arora <84070677+Chirag8023@users.noreply.github.com >
Co-authored-by: shm12 <shmuelb@armosec.io >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: Krishna Agarwal <dmkrishna.agarwal@gmail.com >
Co-authored-by: Saswata Senapati <74651639+saswat16@users.noreply.github.com >
Co-authored-by: Rahul Singh <110548934+rahuldhirendersingh@users.noreply.github.com >
Co-authored-by: deepuyadav004 <deepuyadavze@gmail.com >
Co-authored-by: kartik <97971066+kartikgajjar7@users.noreply.github.com >
Co-authored-by: Rounak-28 <95576871+Rounak-28@users.noreply.github.com >
Co-authored-by: pwnb0y <vickykr07@yahoo.com >
Co-authored-by: Ben Hirschberg <59160382+slashben@users.noreply.github.com >
Co-authored-by: Saptarshi Sarkar <saptarshi.programmer@gmail.com >
Co-authored-by: Rahul Surwade <93492791+RahulSurwade08@users.noreply.github.com >
Co-authored-by: Suhas Gumma <43647369+suhasgumma@users.noreply.github.com >
Co-authored-by: TarangVerma <90996971+TarangVerma@users.noreply.github.com >
Co-authored-by: avikittu <65793296+avikittu@users.noreply.github.com >
Co-authored-by: satyam kale <satyamkale271@gmail.com >
Co-authored-by: Aditya Pratap Singh <adityapratapsingh51@gmail.com >
2022-09-05 10:49:37 +03:00
David Wertenteil
bd970eff83
update to kubescape org
2022-08-22 18:22:28 +03:00
David Wertenteil
ad91178ef7
updated dependencies pkgs
2022-08-18 17:41:03 +03:00
David Wertenteil
aef74d6480
use exteranl go logger
2022-07-18 23:59:56 +03:00
David Wertenteil
8a1ef7da87
submit git scanning
2022-06-07 17:39:02 +03:00
David Wertenteil
da27a27ad5
adding status rest api
2022-05-18 00:34:15 +03:00
David Wertenteil
858d7ac2ef
update pkg struct
2022-04-10 18:06:28 +03:00
David Wertenteil
8b6cb6c5d8
adding logs
2022-04-10 11:55:35 +03:00
dwertent
58b833c18a
support yaml scan submit
2022-03-28 09:40:11 +03:00
DanielGrunbergerCA
da9ab642ec
rm list initializtion
2022-03-22 09:07:55 +02:00
DanielGrunbergerCA
718ca1c7ab
fix json printer
2022-03-22 08:55:36 +02:00
DanielGrunbergerCA
0d0c8e1b97
support status info
2022-03-16 12:08:04 +02:00
dwertent
d0e2730518
add cautils to core
2022-03-13 18:14:48 +02:00
dwertent
6dab82f01a
fixed output format
2022-03-13 15:03:22 +02:00
dwertent
8f1e4ceff0
split pkg
2022-03-13 09:59:57 +02:00
Matthias Bertschy
majiayu000andClaude Opus 4.5
copilot-swe-agent[bot]andmatthyx
fanqiaojun
David Wertenteil
suhasgumma
Frederic BIDON
dwertent
DanielGrunbergerCA
