Ruslan Semagin
fe7dad4560
Refactor: propagate context from main to avoid redundant context creation
...
- Introduced a single context in main() to handle interrupt signals (os.Interrupt, syscall.SIGTERM).
- Removed repetitive context creation in the program by reusing the propagated context.
- Improved code readability and maintainability by centralizing context management.
- Ensured consistent handling of graceful shutdown across the program.
Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com >
2025-02-11 19:52:48 +03:00
VaibhavMalik4187 and Matthias Bertschy
0545818f82
Added tests and improvements for image exceptions
...
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com >
2025-02-07 10:26:53 +01:00
VaibhavMalik4187 and Matthias Bertschy
199c57be30
WIP: Load image exceptions from file
...
Added initial commit to start loading image exceptions from json files.
Currently, it supports vulnerability exceptions using their CVE-IDs.
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com >
2025-02-07 10:26:53 +01:00
VaibhavMalik4187 and Matthias Bertschy
7d55c79f11
Feature: Added exceptions flag in scan image cmd
...
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.
Fixes: https://github.com/kubescape/kubescape/issues/1564
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com >
2025-02-07 10:26:53 +01:00
Matthias Bertschy
70a9380966
fix go imports
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2025-01-09 12:14:56 +01:00
Matthias Bertschy
2d77ea7b62
use pager.EachListItem to filter parented resources
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2024-07-03 16:41:12 +02:00
VaibhavMalik4187
69bbf7f72e
Added Test Suite for the cmd packages
...
Wrote new tests for the following packages
- operator
- patch
- scan
Also fixed potential crash in the RunE function of the image subcommand
in the scan package.
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com >
2023-11-25 16:57:14 +05:30
David Wertenteil and GitHub
3e2314a269
Bump v3 ( #1449 )
...
* bump version
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* change default view
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tests
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed go mod
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-10-22 17:43:51 +03:00
David Wertenteil and GitHub
d5407466d5
Preparing Kubescape for v3 ( #1403 )
...
* wip: minor cli fixes
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: change default view
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: reduce default topWorkloadsNumber to 3
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update gif
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* default view for controls and frameworks
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-10-22 15:39:58 +03:00
72b64127c7
Restructure img cmd ( #1398 )
...
* feat: add kubescape patch command
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* update patch command output format
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* fix patch command logic
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* update docs & minor changes
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
* restructure cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fix tests
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* readme
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fix version code
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* go mod
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Anubhav Gupta <mail.anubhav06@gmail.com >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-10-22 14:51:39 +03:00
53f23b663b
Logger fixes ( #1362 )
...
* fix rbac log
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fix logger logic
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* use const
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* use const for zap
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-30 19:17:41 +03:00
Amir Malka and GitHub
150967eae8
Refactor backend integration ( #1355 )
...
* refactor BE integration
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-23 15:36:08 +03:00
f7b3cdcf35
Improve logs ( #1349 )
...
* use stop-success
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* improve logger
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* RBAC
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-17 14:18:40 +03:00
David Wertenteil and GitHub
51b37d5cbf
Update logs ( #1340 )
...
* update logger
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed logger
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* bump go-logger version
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-10 19:15:14 +03:00
David Wertenteil and GitHub
cf08daf7fb
scan per namespace ( #1337 )
...
* scan per namespace
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* disable unit test
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Adding build image wf
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* removing unused channels
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* adding scopes
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed cluster size
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update rbac deps
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* aggregate resources
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Delete build-image.yaml
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* adding scan image logs
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update cmd message
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update logs
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-08 10:47:15 +03:00
5379b9b0a6
New output ( #1320 )
...
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
Signed-off-by: Amir Malka <amirm@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 12:09:33 +03:00
Vlad Klokun
3b8bd7735e
feat(imagescan): add an image scanning command
...
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
2023-08-02 09:50:17 +03:00
Ruslan Semagin
VaibhavMalik4187andMatthias Bertschy
David WertenteilandGitHub
Amir MalkaandGitHub
