Commit Graph

666 Commits

Author SHA1 Message Date
Daniel Grunberger
b3f664822c fixes 2023-08-01 10:40:57 +03:00
Daniel Grunberger
e829af7205 changes 2023-07-31 21:15:23 +03:00
David Wertenteil
fd3703b21b Merge pull request #1296 from kubescape/error-handle-for-empty-resource-scan
Error handle for empty resource scan
2023-07-31 16:13:42 +03:00
Daniel Grunberger
e4bafad67b fixes 2023-07-31 11:26:47 +03:00
Amir Malka
bbfa5d356a bump opa-utils, k8s-interface and armoapi-go
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-31 10:39:03 +03:00
Daniel Grunberger
dd8f624f0c changes 2023-07-31 09:46:38 +03:00
Daniel Grunberger
e794ab8b45 changes 2023-07-30 22:20:04 +03:00
rcohencyberarmor
d28afcb00c linter correction
Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
2023-07-30 15:46:54 +03:00
rcohencyberarmor
ca6bdb0bef review corrections
Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
2023-07-30 12:06:03 +03:00
Raziel Cohen
e424bfa81b Merge branch 'master' of github.com:kubescape/kubescape into error-handle-for-empty-resource-scan 2023-07-30 11:21:53 +03:00
Daniel Grunberger
05cb1abec5 Merge remote-tracking branch 'other/scan-workload' into new-output 2023-07-30 10:08:42 +03:00
Amir Malka
e972df933a removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-27 19:32:31 +03:00
Amir Malka
d740ba3ed2 remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-27 18:25:37 +03:00
Daniel Grunberger
2121b20076 Merge remote-tracking branch 'other/scan-workload' into new-output 2023-07-27 15:32:33 +03:00
Daniel Grunberger
27482a9067 Merge remote-tracking branch 'other/scan-workload' into new-output 2023-07-27 15:31:59 +03:00
Amir Malka
5b61611789 fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-27 15:28:56 +03:00
Amir Malka
6cefd56559 add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-27 14:09:20 +03:00
Amir Malka
c98b696a9c more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-27 12:03:14 +03:00
Amir Malka
facbc4749a added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-26 10:18:04 +03:00
Daniel Grunberger
e57d65541c integrate img scan 2023-07-26 08:55:31 +03:00
Daniel Grunberger
811914a0ff more 2023-07-25 16:55:01 +03:00
Daniel Grunberger
6341947142 merge 2023-07-25 16:54:44 +03:00
Amir Malka
aab9cd5ff9 added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-25 15:24:09 +03:00
Amir Malka
0df62cb8d3 Merge branch 'master' of github.com:amirmalka/kubescape into scan-workload
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-25 14:55:19 +03:00
David Wertenteil
1a2dda700b Merge pull request #1291 from XDRAGON2002/issue_1290
fix: yamlhandler error handling
2023-07-25 14:39:26 +03:00
Amir Malka
755d8c3bb0 Merge branch 'master' of github.com:amirmalka/kubescape into scan-workload
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-25 11:54:34 +03:00
Daniel Grunberger
219b32d874 identifiers 2023-07-25 11:39:31 +03:00
Daniel Grunberger
315fe799e7 Merge branch 'master' into new-output 2023-07-25 11:11:14 +03:00
Daniel Grunberger
5c6e66d9b7 Merge branch 'scan-workload' of github.com:amirmalka/kubescape into new-output 2023-07-25 11:10:10 +03:00
rcohencyberarmor
b730ef5154 git recognition for empty directory for test
Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
2023-07-24 17:24:13 +03:00
rcohencyberarmor
3280173e95 add error handle when there are no scan to trigger since the directory not contain any relevant scanning files
Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
2023-07-24 17:17:06 +03:00
DRAGON
d0ae4f1c1a fix: yamlhandler error handling
Signed-off-by: DRAGON <anantvijay3@gmail.com>
2023-07-22 13:26:40 +05:30
Vlad Klokun
e4faad8284 Merge pull request #1287 from XDRAGON2002/issue_1255
fix: --- kubescape fix
2023-07-21 21:19:04 +03:00
Vlad Klokun
bc131efd91 tests(fixhandler): remove tests of an unexported sanitization method
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
2023-07-21 20:29:04 +03:00
Vlad Klokun
4763f0d69d docs(fixhandler): follow Go Doc comments convention in sanitization func
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
2023-07-21 20:28:18 +03:00
Vlad Klokun
22c412ce7f refactor(fixhandler): sanitize YAML inside ApplyFixToContent
External observers don’t need to be aware of the fact we need to
sanitize leading document separators in YAML files. This should be
hidden inside our public function - `ApplyFixToContent()`.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
2023-07-21 20:17:33 +03:00
Vlad Klokun
1503e984f8 tests(fixhandler): fail test if unable to open test data file
Previously when there was a typo in a test file name, we silently
failed. This commit makes the test explicitly fail if a test data file
was not found.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
2023-07-21 19:55:03 +03:00
Vlad Klokun
a4478ba899 style(fixhandler): newlines and spacing
Ran with `go fmt`.

Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
2023-07-21 19:45:43 +03:00
Amir Malka
7f812f2c9a fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-20 20:30:25 +03:00
Amir Malka
eab88f0184 Merge branch 'scan-workload' of github.com:amirmalka/kubescape into scan-workload
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-20 20:26:21 +03:00
Amir Malka
557c063f69 support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-20 20:20:14 +03:00
Amir Malka
e1f7e06d45 Merge branch 'master' of github.com:armosec/kubescape into scan-workload 2023-07-20 19:39:17 +03:00
David Wertenteil
fcbcb53995 Merge pull request #1276 from amirmalka/time-based-cached-policies
Time-based cached policies
2023-07-20 16:56:39 +03:00
YiscahLevySilas1
17c43fd366 support related objects (#1272)
* support related objects

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* update pkg versions

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* update go mod

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* fix test

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* fix test

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* only add ids of related resource

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* fixes following review

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

* add test for processRule

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>

---------

Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
2023-07-20 16:23:58 +03:00
DRAGON
912035662b fix: --- kubescape fix
Signed-off-by: DRAGON <anantvijay3@gmail.com>
2023-07-20 00:05:23 +05:30
Amir Malka
bacf15eeb8 cache control inputs
Signed-off-by: Amir Malka <amirm@armosec.io>
2023-07-18 15:56:16 +03:00
Daniel Grunberger
ab634debe4 add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
2023-07-17 15:28:41 +03:00
Daniel Grunberger
ad0103c50a continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
2023-07-17 14:19:23 +03:00
DRAGON
067655d003 fix: stuck spinner
Signed-off-by: DRAGON <anantvijay3@gmail.com>
2023-07-14 01:24:46 +05:30
Daniel Grunberger
46e1cea203 Merge branch 'feat-image-scan-svc' into new-output
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
2023-07-11 13:49:52 +03:00